무료 온라인 액세스 ISACA.CISA-KR.v2025-03-19.q581 모의 시험 (Page 108)

CISA-KR 문제 531

다음 중 IT 공급업체의 서비스 수준을 모니터링하는 데 가장 적합한 기준은 무엇입니까?

A. 서비스 감사 보고서

B. 성능 지표

C. 공급업체 깜짝 방문

D. 벤더와의 인터뷰

CISA-KR 문제 532

IS 감사원이 데이터 센터에서 범용 PIN 코드를 RFID 액세스 카드 시스템으로 교체할 것을 권장하는 가장 큰 이유는 무엇일까요?

A. 추적성을 향상시키기 위해

B. 피기백킹을 방지하기 위해

C. 다중 요소 인증을 구현하려면

D. 유지관리 비용을 줄이기 위해

정답: A

The primary reason an IS auditor would recommend replacing universal PIN codes with an RFID access card system at a data center is to improve traceability (A). Traceability is the ability to track and monitor the activities and movements of individuals or objects within a system or environment. Traceability is important for ensuring security, accountability, and compliance in a data center, where sensitive and critical data are stored and processed.
An RFID access card system can improve traceability by using RFID technology to verify and record the identity and access of each user who enters or exits the data center. RFID stands for Radio Frequency Identification, and it enables wireless communication between a reader and an RFID tag. An RFID tag is installed in a door key card or fob, which users use to gain access to the data center. An RFID reader is installed near the door, and it contains an antenna that receives data transmitted by the RFID tag. A control panel is a computer server that reads and interprets the data passed along by the RFID reader. A database is a storage system that stores the data collected by the control panel1.
An RFID access card system can provide several benefits for traceability, such as123:
It can uniquely identify each user and their access level, and prevent unauthorized access or impersonation.
It can record the date, time, and duration of each user's access, and generate logs and reports for auditing purposes.
It can monitor the location and status of each user within the data center, and alert security personnel in case of any anomalies or emergencies.
It can integrate with other security systems, such as cameras, alarms, or biometrics, to enhance verification and protection.
A universal PIN code system, on the other hand, can compromise traceability by using a single or shared personal identification number (PIN) to grant access to multiple users. A universal PIN code system can pose several risks for traceability, such as4:
It can be easily guessed, stolen, shared, or compromised by malicious actors or insiders.
It can not distinguish between different users or their access levels, and allow unauthorized or excessive access.
It can not record or track the activities or movements of each user within the data center, and create gaps or errors in the audit trail.
It can not integrate with other security systems, and provide limited verification and protection.
Therefore, an IS auditor would recommend replacing universal PIN codes with an RFID access card system at a data center to improve traceability.
References:
RFID Access Control Guide: 4 Best RFID Access Control Systems - ButterflyMX Choosing Card Technology in 2023 | ICT RFID Vs Magnetic Key Cards: What's The Difference? - Go Safer Security RFID vs Barcode - Advantages, Disadvantages & Differences

CISA-KR 문제 533

IS 감사원이 네트워크의 경계 보안 설계를 검토하고 있습니다. 다음 중 어느 것이 나가는 인터넷 트래픽이 제어된다는 가장 큰 확신을 제공합니까?

A. 침입 탐지 시스템(IDS)

B. 보안 정보 및 이벤트 관리(SIEM) 시스템

C. 상태 저장 방화벽

D. 로드 밸런서

CISA-KR 문제 534

IS 감사자는 특정 기간 동안 수행될 감사에 대한 계획을 준비하고 있습니다. IS 감사자는 다음 중 어떤 활동을 먼저 수행해야 합니까?

A. 감사 리소스를 할당합니다.

B. 위험을 우선시하세요.

C. 이전 감사 보고서를 검토하세요.

D. 감사 대상 범위를 결정합니다.

정답: D

An audit universe is a comprehensive list of all the auditable entities, processes, and activities within an organization. It helps the IS auditor to identify the scope, objectives, and priorities of the audit plan, as well as the resources and methodologies required to conduct the audits. An audit universe can also help the IS auditor to ensure that all the key risks, controls, and regulations are covered by the audit plan, and that there are no gaps or overlaps in the audit coverage.
The first activity that the IS auditor should perform when preparing a plan for audits to be carried out over a specified period is to determine the audit universe. This involves defining the criteria and methods for identifying and categorizing the auditable units, such as by business function, process, system, location, or risk level. The IS auditor should also consult with the management and other stakeholders to obtain their input and expectations for the audit plan. The IS auditor should then document and validate the audit universe, and update it regularly to reflect any changes in the organization's structure, operations, or environment.
The other three activities are also important for preparing an audit plan, but they should be performed after determining the audit universe. Allocating audit resources involves assigning staff, time, budget, and tools to each audit based on their complexity, priority, and availability. Prioritizing risks involves assessing the likelihood and impact of each risk associated with each auditable unit, and ranking them according to their significance and urgency. Reviewing prior audit reports involves analyzing the findings, recommendations, and actions from previous audits related to each auditable unit, and evaluating their current status and relevance.
Therefore, determining the audit universe is the best answer.
References:
* Audit Universe - UPDATED 2022 - Examples, Templates & More!
* 01 February 2023 Audit universe - IIA

CISA-KR 문제 535

다음 중 조직이 비즈니스 목표에 맞춰 IT 인프라를 표준화하는 데 가장 적합한 것은 무엇입니까?

A. 데이터 아키텍처

B. 로봇 프로세스 자동화(RPA)

C. 운영 기술

D. 엔터프라이즈 아키텍처(EA)

다른 버전: 243ISACA.CISA-KR.v2026-08-15.q712; 4259ISACA.CISA-KR.v2026-05-16.q709; 1834ISACA.CISA-KR.v2026-05-06.q261; 3207ISACA.CISA-KR.v2026-03-16.q665; 4695ISACA.CISA-KR.v2026-03-07.q651; 9399ISACA.CISA-KR.v2025-04-07.q633; 4499ISACA.CISA-KR.v2025-04-03.q628; 3792ISACA.CISA-KR.v2025-04-02.q544; 4295ISACA.CISA-KR.v2025-03-31.q534; 5446ISACA.CISA-KR.v2025-03-28.q617; 4126ISACA.CISA-KR.v2025-03-03.q807; 5235ISACA.CISA-KR.v2024-02-07.q421; 2904ISACA.CISA-KR.v2024-01-31.q392; 5412ISACA.CISA-KR.v2023-10-24.q329; 5244ISACA.CISA-KR.v2023-07-31.q266; 3244ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 243ISACA.CISA-KR.v2026-08-15.q712; 181Microsoft.MS-700-KR.v2026-08-15.q203; 134Microsoft.AZ-305-KR.v2026-08-14.q177; 206Microsoft.DP-900-KR.v2026-08-13.q130; 290Microsoft.PL-600.v2026-08-11.q206; 230Microsoft.DP-100.v2026-08-11.q160; 191Oracle.1Z0-1048-25.v2026-08-11.q68; 160ISQI.CTAL-TAE.v2026-08-11.q37; 202ServiceNow.CIS-HR.v2026-08-11.q84; 283Salesforce.Plat-Arch-201.v2026-08-10.q101