An IS auditor discovers that a developer has used the same key to grant access...

Isaca CISA Question Answer

An IS auditor discovers that a developer has used the same key to grant access to multiple applications making calls to an application programming interface (API). Which of the following is the BEST recommendation to address this situation?

Replace the API key with time-limited tokens that grant least privilege access.

Authorize the API key to allow read-only access by all applications.

Implement a process to expire the API key after a previously agreed-upon period of time.

Coordinate an API key rotation exercise with all impacted application owners.

Isaca CISA View All Questions

Isaca CISA Summary

Vendor: Isaca
Product: CISA
Update on: Jul 25, 2025
Questions: 1407

Price: $52.5 ~~$149.99~~

Which of the following presents the GREATEST risk associated with end-user computing (EUC) applica-tions over...

Which of the following recommendations would BEST prevent the implementation of IT projects without collaborating...

Summer Special Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: vce65

An IS auditor discovers that a developer has used the same key to grant access...

The Answer Is:

Isaca CISA Summary

Payments We Accept

Contact Us