CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 313


Due to a high volume of customer orders, an organization plans to implement a new application for customers to use for online ordering. Which type of testing is

MOST important to ensure the security of the application prior to go-live?

Show Answer
Correct Answer: AC

To ensure the security of the application before it goes live, vulnerability testing is the most crucial. Vulnerability testing identifies security flaws and weaknesses that could be exploited by attackers. This ensures that the application is secure and can protect sensitive customer information. Other types of testing, like stress testing, focus on performance under load but do not directly address security concerns.

Discussion

13 comments
Sign in to comment
DavoleeOption: A
Sep 28, 2022

Stress testing is one of the most useful software testing procedures since it helps the team to assure the product's performance. Furthermore, it verifies the software's security, dependability, and error-handling capabilities, further enhancing its quality

MunaMOption: C
Sep 6, 2022

Answer should be C as it's talking about security of the application

Zephaniah
Sep 7, 2022

A is the answer.. security also addresses system availability. the issue here is if the system will handle the voluminous orders

JulianleehkOption: C
Nov 26, 2022

should be c

JustCisaOption: C
Oct 29, 2023

CCCCCCCCCCCCCCCC if they ask for "ensure the security of the application" it has to be vulnerability testing stress testing has nothing to do with security

46080f2Option: C
May 31, 2024

C. Vulnerability testing is to ensure the security of the application. It can't be A. Searching on CISA ISACA Ref. Manual 27th ed. we find two occurences of the term "stress testing". 1) "3.5.1 Testing Classifications" - Stress Testing: Studying the impact on the application by testing with an incremental number of concurrent users/services on the application to determine the maximum number of concurrent users/services the application can process 2) Glossary C - Capacity stress testing: Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing. Also searching the ISACA site on google ( search operator site:isaca.org ) doesn't give any indication that stress testing could have something to do with security.

3008Option: C
Apr 30, 2023

security is important of this question , c is answer

oldmagicOption: C
Jun 27, 2023

Correct answer is C. The question specifically asks "ensure the security of the application" so this rules out A

RachyOption: A
Jan 17, 2024

A is the answer as the keyword in this question is high volume… so they need to ensure that the product can take many performance at once

SibsankarOption: C
Mar 1, 2024

Vulnerability testing is specifically designed to identify weaknesses and security flaws in the application that could be exploited by attackers. So , right answer is C

SwallowsOption: A
Apr 12, 2024

Software stress tests are designed and performed to identify vulnerabilities, weaknesses, and potential failures that may occur when a system is subjected to intense loads and adverse conditions.

topikalOption: C
Jun 13, 2024

Stress testing is not directly related to security

analuisamoreiraOption: C
Jun 27, 2024

The question is about to "ensure security", how come Stess testing will address that?

RS66Option: C
Jul 2, 2024

The question says ensure SECURITY. Vulnerability testing ensures security while stress testing ensures performance and availability.