IIA-CIA-Part3-KR 문제 26
수행된 작업의 예산 비용은 어떤 프로젝트 관리 활동을 측정하는 데 가장 잘 사용되는 메트릭입니까?
정답: D
Understanding the Metric:
* The Budgeted Cost of Work Performed (BCWP), also known as Earned Value (EV), represents the value of work actually performed up to a specific date, based on the budgeted cost.
* This metric is part of Earned Value Management (EVM) and is used to track project performance by comparing planned and actual progress.
Why Cost Control?
* Cost control involves monitoring expenses, comparing actual performance with the budget, and taking corrective actions when needed.
* BCWP is a core metric in cost control as it helps in determining whether a project is staying within budget.
Why Other Options Are Incorrect:
* A. Resource planning: Focuses on allocating personnel, equipment, and materials but does not deal with financial performance.
* B. Cost estimating: Involves predicting project costs before execution, but BCWP is used during the project, not during estimation.
* C. Cost budgeting: Refers to setting a budget, whereas BCWP measures how much work has been performed relative to that budget.
IIA Standards and References:
* IIA Standard 2120 - Risk Management: Internal auditors should assess cost control mechanisms to manage financial risks.
* IIA Practice Guide: Auditing Capital Projects (2016): Emphasizes earned value management as a key cost control measure.
* PMBOK Guide - Cost Management Knowledge Area: Highlights BCWP as a crucial tool for monitoring and controlling project costs.
* The Budgeted Cost of Work Performed (BCWP), also known as Earned Value (EV), represents the value of work actually performed up to a specific date, based on the budgeted cost.
* This metric is part of Earned Value Management (EVM) and is used to track project performance by comparing planned and actual progress.
Why Cost Control?
* Cost control involves monitoring expenses, comparing actual performance with the budget, and taking corrective actions when needed.
* BCWP is a core metric in cost control as it helps in determining whether a project is staying within budget.
Why Other Options Are Incorrect:
* A. Resource planning: Focuses on allocating personnel, equipment, and materials but does not deal with financial performance.
* B. Cost estimating: Involves predicting project costs before execution, but BCWP is used during the project, not during estimation.
* C. Cost budgeting: Refers to setting a budget, whereas BCWP measures how much work has been performed relative to that budget.
IIA Standards and References:
* IIA Standard 2120 - Risk Management: Internal auditors should assess cost control mechanisms to manage financial risks.
* IIA Practice Guide: Auditing Capital Projects (2016): Emphasizes earned value management as a key cost control measure.
* PMBOK Guide - Cost Management Knowledge Area: Highlights BCWP as a crucial tool for monitoring and controlling project costs.
IIA-CIA-Part3-KR 문제 27
모든 시장에서 동일한 제품 라인을 판매하기 위한 고유 한 광고 캠페인을 구현하기 위해 조직이 채택하는 가장 효과적인 전략은 무엇입니까?
정답: D
A globalization strategy focuses on delivering standardized products and marketing campaigns across multiple international markets with minimal local customization. This approach ensures brand consistency and cost efficiencies while targeting a broad audience.
(A) Export strategy.
Incorrect. An export strategy refers to selling domestic products overseas without significant marketing adaptation. It does not involve a unique advertising campaign tailored for global markets.
(B) Transnational strategy.
Incorrect. A transnational strategy balances global efficiency with local responsiveness, meaning advertising campaigns would be adapted based on regional preferences rather than being uniform across all markets.
(C) Multi-domestic strategy.
Incorrect. A multi-domestic strategy involves customizing products and marketing approaches for each local market. This is the opposite of a standardized advertising campaign.
(D) Globalization strategy. #
Correct. A globalization strategy implements a standardized marketing approach to maintain a consistent brand message across all markets while reducing costs.
Example: Companies like Apple, Coca-Cola, and Nike use globalized advertising to promote identical products across different countries.
IIA Standard 2110 - Governance emphasizes the need for alignment between business strategy and risk management, which includes global marketing decisions.
IIA Standard 2110 - Governance
COSO Framework - Strategic Risk Management
IIA GTAG - "Auditing Business Strategy Alignment"
Analysis of Answer Choices:IIA References:Thus, the correct answer is D, as a globalization strategy effectively supports a uniform advertising campaign for identical products across multiple markets.
(A) Export strategy.
Incorrect. An export strategy refers to selling domestic products overseas without significant marketing adaptation. It does not involve a unique advertising campaign tailored for global markets.
(B) Transnational strategy.
Incorrect. A transnational strategy balances global efficiency with local responsiveness, meaning advertising campaigns would be adapted based on regional preferences rather than being uniform across all markets.
(C) Multi-domestic strategy.
Incorrect. A multi-domestic strategy involves customizing products and marketing approaches for each local market. This is the opposite of a standardized advertising campaign.
(D) Globalization strategy. #
Correct. A globalization strategy implements a standardized marketing approach to maintain a consistent brand message across all markets while reducing costs.
Example: Companies like Apple, Coca-Cola, and Nike use globalized advertising to promote identical products across different countries.
IIA Standard 2110 - Governance emphasizes the need for alignment between business strategy and risk management, which includes global marketing decisions.
IIA Standard 2110 - Governance
COSO Framework - Strategic Risk Management
IIA GTAG - "Auditing Business Strategy Alignment"
Analysis of Answer Choices:IIA References:Thus, the correct answer is D, as a globalization strategy effectively supports a uniform advertising campaign for identical products across multiple markets.
IIA-CIA-Part3-KR 문제 28
조직의 IT 인프라 위험을 검토할 때 다음 중 워크스테이션 검토의 팬으로 테스트해야 하는 제어는 무엇입니까?
정답: C
Understanding IT Infrastructure Risks and Workstation Security:
Reviewing an organization's IT infrastructure risks includes assessing the security of workstations (desktops, laptops, and terminals) that connect to the organization's network.
Workstations are vulnerable to physical theft, unauthorized access, and malware attacks, making physical controls a critical security measure.
Why Physical Controls Are the Most Relevant for Workstations:
Physical controls prevent unauthorized physical access, theft, tampering, and damage to workstations.
Examples include:
Locked office spaces or workstation enclosures to restrict access.
Security badges or biometric authentication to prevent unauthorized use.
Cable locks for laptops and desktop computers to deter theft.
Surveillance cameras and security guards to monitor access.
Why Other Options Are Incorrect:
A). Input controls - Incorrect.
Input controls ensure accuracy and completeness of data entry, which applies more to application security, not workstation security.
B). Segregation of duties - Incorrect.
Segregation of duties prevents fraud and conflicts of interest, but it does not directly address workstation security risks.
D). Integrity controls - Incorrect.
Integrity controls ensure data consistency and accuracy in databases and transactions, not workstation security.
IIA's Perspective on IT Risk and Physical Security Controls:
IIA Standard 2110 - Governance requires organizations to implement physical security measures for IT assets, including workstations.
IIA GTAG (Global Technology Audit Guide) on IT Risks highlights the importance of restricting physical access to IT devices to prevent unauthorized use or data breaches.
ISO 27001 Information Security Standard recommends physical controls to secure IT infrastructure and prevent workstation-related risks.
IIA References:
IIA Standard 2110 - IT Security & Physical Access Control
IIA GTAG - Physical Security of IT Assets
ISO 27001 - Physical Security and IT Risk Management
Thus, the correct and verified answer is C. Physical controls.
Reviewing an organization's IT infrastructure risks includes assessing the security of workstations (desktops, laptops, and terminals) that connect to the organization's network.
Workstations are vulnerable to physical theft, unauthorized access, and malware attacks, making physical controls a critical security measure.
Why Physical Controls Are the Most Relevant for Workstations:
Physical controls prevent unauthorized physical access, theft, tampering, and damage to workstations.
Examples include:
Locked office spaces or workstation enclosures to restrict access.
Security badges or biometric authentication to prevent unauthorized use.
Cable locks for laptops and desktop computers to deter theft.
Surveillance cameras and security guards to monitor access.
Why Other Options Are Incorrect:
A). Input controls - Incorrect.
Input controls ensure accuracy and completeness of data entry, which applies more to application security, not workstation security.
B). Segregation of duties - Incorrect.
Segregation of duties prevents fraud and conflicts of interest, but it does not directly address workstation security risks.
D). Integrity controls - Incorrect.
Integrity controls ensure data consistency and accuracy in databases and transactions, not workstation security.
IIA's Perspective on IT Risk and Physical Security Controls:
IIA Standard 2110 - Governance requires organizations to implement physical security measures for IT assets, including workstations.
IIA GTAG (Global Technology Audit Guide) on IT Risks highlights the importance of restricting physical access to IT devices to prevent unauthorized use or data breaches.
ISO 27001 Information Security Standard recommends physical controls to secure IT infrastructure and prevent workstation-related risks.
IIA References:
IIA Standard 2110 - IT Security & Physical Access Control
IIA GTAG - Physical Security of IT Assets
ISO 27001 - Physical Security and IT Risk Management
Thus, the correct and verified answer is C. Physical controls.
IIA-CIA-Part3-KR 문제 29
다음 물리적 접근 통제 중 예방적 통제와 탐지적 통제 역할을 모두 하는 것은 무엇입니까?
정답: C
* Understanding Physical Access Controls:
* Physical access controls protect assets by preventing unauthorized access and detecting potential security violations.
* Controls can be preventive (stop incidents from occurring) or detective (identify incidents after they occur).
* Why Surveillance Cameras Function as Both Preventive and Detective Controls:
* Preventive: The presence of cameras discourages unauthorized access and malicious activities.
* Detective: If an incident occurs, cameras provide recorded evidence for investigation and accountability.
* Why Other Options Are Less Suitable:
* A. Locked doors - Purely preventive, as they block unauthorized access but do not detect breaches.
* B. Firewalls - Primarily an IT security measure, not a physical access control.
* D. Login IDs and passwords - These are logical (IT) access controls, not physical controls.
* IIA GTAG 15 - Auditing Privacy and Security Risks: Highlights the dual role of surveillance as a preventive and detective control.
* IIA Standard 2120 - Risk Management: Encourages controls that both prevent and detect risks.
* COSO's Internal Control Framework: Supports security measures that serve multiple control functions.
Relevant IIA References:# Final Answer: Surveillance cameras (Option C).
* Physical access controls protect assets by preventing unauthorized access and detecting potential security violations.
* Controls can be preventive (stop incidents from occurring) or detective (identify incidents after they occur).
* Why Surveillance Cameras Function as Both Preventive and Detective Controls:
* Preventive: The presence of cameras discourages unauthorized access and malicious activities.
* Detective: If an incident occurs, cameras provide recorded evidence for investigation and accountability.
* Why Other Options Are Less Suitable:
* A. Locked doors - Purely preventive, as they block unauthorized access but do not detect breaches.
* B. Firewalls - Primarily an IT security measure, not a physical access control.
* D. Login IDs and passwords - These are logical (IT) access controls, not physical controls.
* IIA GTAG 15 - Auditing Privacy and Security Risks: Highlights the dual role of surveillance as a preventive and detective control.
* IIA Standard 2120 - Risk Management: Encourages controls that both prevent and detect risks.
* COSO's Internal Control Framework: Supports security measures that serve multiple control functions.
Relevant IIA References:# Final Answer: Surveillance cameras (Option C).
IIA-CIA-Part3-KR 문제 30
다음 중 지속적인 생산 모니터링을 가능하게 하기 위해 빅 데이터 시스템을 구현하는 동안 경영진이 설정해야 하는 것은 무엇입니까?
정답: A
When implementing big data systems, organizations must establish ongoing production monitoring to ensure system performance, efficiency, and reliability.
Why Option A (Key performance indicators) is Correct:
KPIs (Key Performance Indicators) measure the effectiveness and success of big data systems.
KPIs help track system efficiency, data processing speed, accuracy, and resource utilization during production.
Examples of KPIs in big data systems include data ingestion rate, processing time, query performance, system uptime, and error rates.
Why Other Options Are Incorrect:
Option B (Reports of software customization):
Incorrect because software customization reports document system modifications but do not monitor system performance.
Option C (Change and patch management):
Incorrect because change and patch management deals with software updates and security fixes, not ongoing performance monitoring.
Option D (Master data management):
Incorrect because master data management focuses on data governance and consistency, not real-time system performance.
IIA GTAG - "Auditing Big Data Systems": Recommends using KPIs to measure the effectiveness of big data implementation.
COBIT 2019 - APO08 (Manage Performance and Capacity): Emphasizes KPI tracking for IT and data system performance.
NIST Big Data Framework: Highlights the importance of KPIs for monitoring big data system performance.
IIA References:
Why Option A (Key performance indicators) is Correct:
KPIs (Key Performance Indicators) measure the effectiveness and success of big data systems.
KPIs help track system efficiency, data processing speed, accuracy, and resource utilization during production.
Examples of KPIs in big data systems include data ingestion rate, processing time, query performance, system uptime, and error rates.
Why Other Options Are Incorrect:
Option B (Reports of software customization):
Incorrect because software customization reports document system modifications but do not monitor system performance.
Option C (Change and patch management):
Incorrect because change and patch management deals with software updates and security fixes, not ongoing performance monitoring.
Option D (Master data management):
Incorrect because master data management focuses on data governance and consistency, not real-time system performance.
IIA GTAG - "Auditing Big Data Systems": Recommends using KPIs to measure the effectiveness of big data implementation.
COBIT 2019 - APO08 (Manage Performance and Capacity): Emphasizes KPI tracking for IT and data system performance.
NIST Big Data Framework: Highlights the importance of KPIs for monitoring big data system performance.
IIA References:
- 다른 버전
- 1772IIA.IIA-CIA-Part3-KR.v2026-08-19.q374
- 1754IIA.IIA-CIA-Part3-KR.v2026-02-16.q207
- 2719IIA.IIA-CIA-Part3-KR.v2025-04-09.q203
- 최근 업로드
- 128Huawei.H12-351_V1.0.v2026-09-04.q76
- 757Cisco.300-435.v2026-09-03.q259
- 370Oracle.1Z0-1045-26.v2026-09-03.q17
- 660IIA.IIA-CIA-Part1.v2026-09-03.q627
- 521Fortinet.NSE6_OTS_AR-7.6.v2026-09-03.q95
- 499Snowflake.DAA-C01.v2026-09-03.q67
- 3506Salesforce.AP-223.v2026-09-01.q94
- 2614Splunk.SPLK-5001.v2026-09-01.q60
- 3940Cisco.300-540.v2026-09-01.q62
- 5185Microsoft.MS-102-KR.v2026-09-01.q239
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. IIA.IIA-CIA-Part3-KR.v2026-05-02.q255 모의시험 시험자료를 다운 받으세요.