IIA-CIA-Part3-KR 문제 156
다음 중 사물 인터넷 개념의 이점으로 옳지 않은 것은?
정답: B
The Internet of Things (IoT) refers to a network of interconnected physical devices that collect and exchange data through the internet. The key benefits of IoT include automation, improved decision-making, cost savings, and efficiency gains.
* (A) Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer's knowledge.
* This is incorrect because it focuses on unauthorized access rather than a benefit of IoT. Security and monitoring are major concerns in IoT environments.
* IIA Standard 2110 - Governance requires organizations to ensure adequate governance structures for IT and data security.
* (B) Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs. #
* This is correct because IoT enables smart devices to automatically adjust based on real-time data.
* Example: Smart thermostats (e.g., Nest, Honeywell) use IoT to track energy prices and consumption, adjusting temperatures to optimize efficiency.
* IIA Practice Guide "Assessing the Governance of Risks in IT Projects" highlights IoT as a tool for operational efficiency and cost savings.
* (C) Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.
* This relates more to big data and data analytics, not necessarily IoT.
* IIA GTAG "Auditing IT Governance" discusses IoT in operational efficiency but distinguishes it from data extraction.
* (D) Data mining and data collection from the internet and social networks is easier, and the results are more comprehensive.
* This describes AI and machine learning rather than IoT, which primarily connects physical devices.
* IIA GTAG "Auditing Cybersecurity Risk" highlights IoT risks but does not emphasize social media data mining.
* IIA GTAG (Global Technology Audit Guide) - "Auditing IT Governance"
* IIA GTAG - "Assessing the Governance of Risks in IT Projects"
* IIA Standard 2110 - Governance
* IIA GTAG - "Auditing Cybersecurity Risk"
Analysis of Answer Choices:IIA References:Thus, the most appropriate answer is B because IoT improves efficiency by automating energy consumption based on market conditions.
* (A) Employees can choose from a variety of devices they want to utilize to privately read work emails without their employer's knowledge.
* This is incorrect because it focuses on unauthorized access rather than a benefit of IoT. Security and monitoring are major concerns in IoT environments.
* IIA Standard 2110 - Governance requires organizations to ensure adequate governance structures for IT and data security.
* (B) Physical devices, such as thermostats and heat pumps, can be set to react to electricity market changes and reduce costs. #
* This is correct because IoT enables smart devices to automatically adjust based on real-time data.
* Example: Smart thermostats (e.g., Nest, Honeywell) use IoT to track energy prices and consumption, adjusting temperatures to optimize efficiency.
* IIA Practice Guide "Assessing the Governance of Risks in IT Projects" highlights IoT as a tool for operational efficiency and cost savings.
* (C) Information can be extracted more efficiently from databases and transmitted to relevant applications for in-depth analytics.
* This relates more to big data and data analytics, not necessarily IoT.
* IIA GTAG "Auditing IT Governance" discusses IoT in operational efficiency but distinguishes it from data extraction.
* (D) Data mining and data collection from the internet and social networks is easier, and the results are more comprehensive.
* This describes AI and machine learning rather than IoT, which primarily connects physical devices.
* IIA GTAG "Auditing Cybersecurity Risk" highlights IoT risks but does not emphasize social media data mining.
* IIA GTAG (Global Technology Audit Guide) - "Auditing IT Governance"
* IIA GTAG - "Assessing the Governance of Risks in IT Projects"
* IIA Standard 2110 - Governance
* IIA GTAG - "Auditing Cybersecurity Risk"
Analysis of Answer Choices:IIA References:Thus, the most appropriate answer is B because IoT improves efficiency by automating energy consumption based on market conditions.
IIA-CIA-Part3-KR 문제 157
다음 중 스피어 피싱 공격을 가장 잘 보여주는 시나리오는 무엇입니까?
정답: C
* Understanding Spear Phishing Attacks:
* Spear phishing is a targeted cyberattack where attackers send personalized emails to trick individuals into providing sensitive data (e.g., passwords, financial information).
* Unlike regular phishing, which casts a wide net, spear phishing is highly customized and often appears to come from a trusted source.
* Why Option C Is Correct?
* The scenario describes a highly personalized email (related to a golf membership) that tricks the recipient into clicking a malicious hyperlink and entering sensitive data.
* This matches the definition of a spear phishing attack, where an attacker tailors a scam specifically for an individual.
* IIA GTAG 16 - Data Analytics and ISO 27001 emphasize the need for security awareness training to mitigate such threats.
* Why Other Options Are Incorrect?
* Option A (Website attack causing a server crash):
* This describes a Denial-of-Service (DoS) attack, not spear phishing.
* Option B (Generic recorded message requesting password data):
* This is vishing (voice phishing), not spear phishing. Spear phishing relies on personalized emails.
* Option D (Fake social media investment opportunity):
* This describes mass phishing, which targets multiple users, unlike spear phishing, which is highly targeted.
* Spear phishing is a targeted attack that uses personal details to deceive individuals, making option C the best choice.
* IIA GTAG 16 and ISO 27001 emphasize cybersecurity awareness to prevent such attacks.
Final Justification:IIA References:
* IIA GTAG 16 - Data Analytics in Cybersecurity Audits
* ISO 27001 - Cybersecurity Best Practices
* NIST SP 800-61 - Incident Response Guidelines for Phishing Attacks
* Spear phishing is a targeted cyberattack where attackers send personalized emails to trick individuals into providing sensitive data (e.g., passwords, financial information).
* Unlike regular phishing, which casts a wide net, spear phishing is highly customized and often appears to come from a trusted source.
* Why Option C Is Correct?
* The scenario describes a highly personalized email (related to a golf membership) that tricks the recipient into clicking a malicious hyperlink and entering sensitive data.
* This matches the definition of a spear phishing attack, where an attacker tailors a scam specifically for an individual.
* IIA GTAG 16 - Data Analytics and ISO 27001 emphasize the need for security awareness training to mitigate such threats.
* Why Other Options Are Incorrect?
* Option A (Website attack causing a server crash):
* This describes a Denial-of-Service (DoS) attack, not spear phishing.
* Option B (Generic recorded message requesting password data):
* This is vishing (voice phishing), not spear phishing. Spear phishing relies on personalized emails.
* Option D (Fake social media investment opportunity):
* This describes mass phishing, which targets multiple users, unlike spear phishing, which is highly targeted.
* Spear phishing is a targeted attack that uses personal details to deceive individuals, making option C the best choice.
* IIA GTAG 16 and ISO 27001 emphasize cybersecurity awareness to prevent such attacks.
Final Justification:IIA References:
* IIA GTAG 16 - Data Analytics in Cybersecurity Audits
* ISO 27001 - Cybersecurity Best Practices
* NIST SP 800-61 - Incident Response Guidelines for Phishing Attacks
IIA-CIA-Part3-KR 문제 158
자본 예산은 다양한 자본 프로젝트 중에서 회사의 재정 투자 수익을 극대화할 프로젝트를 선택하는 것을 포함합니다. 다음 중 어느 당사자가 자본 예산을 승인합니까?
정답: A
Comprehensive and Detailed In-Depth Explanation:
Capital budgeting involves long-term investment decisions, such as purchasing new equipment, expanding facilities, or launching new products. These strategic financial decisions require approval at the highest level of governance.
The Board of Directors (Option A) is responsible for reviewing and approving capital budgets, ensuring alignment with corporate strategy.
Senior management (Option B) and the CFO (Option C) contribute by evaluating proposals, but they typically do not have final approval authority.
Accounting personnel (Option D) manage financial reporting but do not approve budgets.
Thus, the Board of Directors (A) is the correct answer.
Reference: IIA Financial Management - Capital Budgeting Approval Process
Capital budgeting involves long-term investment decisions, such as purchasing new equipment, expanding facilities, or launching new products. These strategic financial decisions require approval at the highest level of governance.
The Board of Directors (Option A) is responsible for reviewing and approving capital budgets, ensuring alignment with corporate strategy.
Senior management (Option B) and the CFO (Option C) contribute by evaluating proposals, but they typically do not have final approval authority.
Accounting personnel (Option D) manage financial reporting but do not approve budgets.
Thus, the Board of Directors (A) is the correct answer.
Reference: IIA Financial Management - Capital Budgeting Approval Process
IIA-CIA-Part3-KR 문제 159
다음 중 중앙 집중식 구조가 아닌 분산형 조직 구조의 장점은 무엇입니까?
정답: C
A decentralized organizational structure distributes decision-making authority across different business units or geographic regions. One major advantage is the ability to tap into a larger talent pool, as decision- making is not restricted to headquarters, and leadership opportunities exist at multiple levels.
* (A) Greater cost-effectiveness.
* Incorrect. A decentralized structure often increases costs due to duplicate resources, additional oversight, and inefficiencies from fragmented decision-making.
* (B) Increased economies of scale.
* Incorrect. Centralized organizations benefit more from economies of scale because they can standardize processes and consolidate purchasing power. Decentralization reduces these benefits by spreading decision-making across multiple locations.
* (C) Larger talent pool. #
* Correct. Decentralization allows organizations to recruit, develop, and retain talent in different locations, rather than relying solely on headquarters for leadership roles.
* This aligns with IIA Standard 2110 - Governance, which emphasizes the importance of leadership distribution and talent management in organizations.
* (D) Strong internal controls.
* Incorrect. Centralized structures typically have stronger internal controls, as decision- making and risk management are closely monitored. Decentralization increases the risk of inconsistent controls across different units.
* IIA Standard 2110 - Governance
* COSO Framework - Organizational Structure and Risk Management
* IIA GTAG - "Auditing Business Strategy Alignment"
Analysis of Answer Choices:IIA References:Thus, the correct answer is C, as decentralization expands the talent pool by enabling local decision-making and leadership development.
* (A) Greater cost-effectiveness.
* Incorrect. A decentralized structure often increases costs due to duplicate resources, additional oversight, and inefficiencies from fragmented decision-making.
* (B) Increased economies of scale.
* Incorrect. Centralized organizations benefit more from economies of scale because they can standardize processes and consolidate purchasing power. Decentralization reduces these benefits by spreading decision-making across multiple locations.
* (C) Larger talent pool. #
* Correct. Decentralization allows organizations to recruit, develop, and retain talent in different locations, rather than relying solely on headquarters for leadership roles.
* This aligns with IIA Standard 2110 - Governance, which emphasizes the importance of leadership distribution and talent management in organizations.
* (D) Strong internal controls.
* Incorrect. Centralized structures typically have stronger internal controls, as decision- making and risk management are closely monitored. Decentralization increases the risk of inconsistent controls across different units.
* IIA Standard 2110 - Governance
* COSO Framework - Organizational Structure and Risk Management
* IIA GTAG - "Auditing Business Strategy Alignment"
Analysis of Answer Choices:IIA References:Thus, the correct answer is C, as decentralization expands the talent pool by enabling local decision-making and leadership development.
IIA-CIA-Part3-KR 문제 160
연례 성과 검토에서 영업 관리자는 자신이 직업으로 인해 상당한 스트레스를 받고 있음을 인정하지만 높은 상여금으로 인해 조직에 남아 있습니다. 다음 중 직업을 계속 유지하려는 주된 동기를 가장 잘 설명한 것은 무엇입니까?
정답: C
Extrinsic rewards are external incentives that motivate an employee to perform a task or stay in a job. These rewards include salary, bonuses, benefits, promotions, and other tangible incentives. In this case, the sales manager explicitly states that she remains in the organization because of the high bonuses, making this an example of extrinsic motivation.
* (A) Incorrect - Intrinsic reward.
* Intrinsic rewards are derived from internal satisfaction, such as personal growth, job fulfillment, or passion for work.
* Since the manager stays primarily for monetary bonuses rather than job satisfaction, this is not intrinsic motivation.
* (B) Incorrect - Job enrichment.
* Job enrichment involves enhancing job roles by adding responsibilities, autonomy, or variety to improve motivation.
* The scenario does not mention job enhancement as a reason for staying.
* (C) Correct - Extrinsic reward.
* High bonuses are a classic example of extrinsic motivation.
* The manager is staying for financial incentives rather than job satisfaction.
* (D) Incorrect - The hierarchy of needs.
* Maslow's Hierarchy of Needs explains different levels of human motivation, but the question asks for a specific type of motivation rather than a broad theoretical framework.
* IIA's Guide on Human Resources Risk Management
* Highlights the impact of extrinsic vs. intrinsic motivation on employee retention.
* COSO's ERM Framework - Employee Retention and Performance Management
* Discusses the role of financial incentives in retaining employees.
* IIA's Global Internal Audit Standards - Organizational Behavior and Employee Motivation
* Explains intrinsic vs. extrinsic rewards in workforce management.
Analysis of Answer Choices:IIA References and Internal Auditing Standards:
* (A) Incorrect - Intrinsic reward.
* Intrinsic rewards are derived from internal satisfaction, such as personal growth, job fulfillment, or passion for work.
* Since the manager stays primarily for monetary bonuses rather than job satisfaction, this is not intrinsic motivation.
* (B) Incorrect - Job enrichment.
* Job enrichment involves enhancing job roles by adding responsibilities, autonomy, or variety to improve motivation.
* The scenario does not mention job enhancement as a reason for staying.
* (C) Correct - Extrinsic reward.
* High bonuses are a classic example of extrinsic motivation.
* The manager is staying for financial incentives rather than job satisfaction.
* (D) Incorrect - The hierarchy of needs.
* Maslow's Hierarchy of Needs explains different levels of human motivation, but the question asks for a specific type of motivation rather than a broad theoretical framework.
* IIA's Guide on Human Resources Risk Management
* Highlights the impact of extrinsic vs. intrinsic motivation on employee retention.
* COSO's ERM Framework - Employee Retention and Performance Management
* Discusses the role of financial incentives in retaining employees.
* IIA's Global Internal Audit Standards - Organizational Behavior and Employee Motivation
* Explains intrinsic vs. extrinsic rewards in workforce management.
Analysis of Answer Choices:IIA References and Internal Auditing Standards:
- 최근 업로드
- 132SAP.C_S4CPB_2602.v2026-06-13.q7
- 151SAP.C-S4CS-2602.v2026-06-13.q29
- 173Salesforce.Slack-Con-201.v2026-06-13.q86
- 176Oracle.1Z1-136.v2026-06-13.q46
- 164BCS.BAPv5.v2026-06-13.q62
- 142PaloAltoNetworks.SSE-Engineer.v2026-06-13.q18
- 142SAP.C_CR125.v2026-06-13.q26
- 137Proofpoint.PPAN01.v2026-06-13.q19
- 148Workday.Workday-Pro-Time-Tracking.v2026-06-13.q19
- 167API.API-1184.v2026-06-12.q40
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. IIA.IIA-CIA-Part3-KR.v2026-02-16.q207 모의시험 시험자료를 다운 받으세요.