CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 423


Which of the following is the MOST appropriate control to ensure integrity of online orders?

Show Answer
Correct Answer: AB

Digital signatures are the most appropriate control to ensure the integrity of online orders. They ensure both the integrity and authenticity of a message by verifying that the data has not been altered and by confirming the identity of the sender. While public key encryption focuses mainly on confidentiality, digital signatures specifically provide integrity assurance.

Discussion

6 comments
Sign in to comment
saado9Option: B
Mar 11, 2023

B. Digital signature

MohamedAbdelaalOption: B
Apr 17, 2023

whats the link between data integrity and the encryption

3008Option: A
May 1, 2023

pki method

3008
May 27, 2023

sorry, b is answer

oldmagicOption: B
Jun 28, 2023

A Is more about confidentiality, It alone does not provide integrity. digital signature ensures both the integrity and authenticity of a message.

KAP2HURUFOption: A
Mar 3, 2024

Applications of Public Key Encryption: Secure communication channels: Public key encryption is used in various protocols like HTTPS (Secure Hypertext Transfer Protocol) to secure communication between web browsers and servers, ensuring the confidentiality and integrity of data transmission. Digital signatures: Public key encryption forms the foundation for digital signatures, which allow users to electronically sign documents to verify their authenticity and integrity. Secure email communication: Public key encryption can be used to encrypt email messages, ensuring only the intended recipient can read them.

KAP2HURUF
Mar 3, 2024

https://www.isaca.org/resources/news-and-trends/industry-news/2018/pki-explained-why-it-is-necessary-and-relevant-now-more-than-ever

KAP2HURUF
Mar 3, 2024

i think since its online u need more than digital signature, u need SSL/TLS to secure the connection, thus A is more wide spectrum than B CMIIW

shalota2
May 31, 2024

I think is B. Be careful it is saying public key encryption not public key infrastructure

SwallowsOption: B
Jun 8, 2024

While public key encryption (option A) can also help protect the confidentiality and integrity of online orders by encrypting the data during transmission, it primarily focuses on confidentiality rather than integrity verification. Digital signatures, on the other hand, are specifically designed to provide integrity assurance by verifying the authenticity and unaltered nature of the data.