무료 온라인 액세스 ISACA.CISA-KR.v2025-03-28.q617 모의 시험 (Page 114)

CISA-KR 문제 561

위험 관리 관점에서 볼 때, 대규모의 복잡한 데이터 센터 IT 인프라를 구현할 때 가장 적합한 접근 방식은 다음 중 어느 것일까요?

A. 배포 전 새로운 인프라 시뮬레이션

B. 프로토타입 제작 및 1단계 배포

C. 순차적 단계를 기반으로 한 배포 계획

D. 성공적인 개념 증명을 통한 빅뱅 배포

CISA-KR 문제 562

감사 업무를 준비할 때 감사 목표를 문서화하는 주된 목적은 무엇입니까?

A. 검토 중인 활동과 관련된 전반적인 위험을 해결하기 위해

B. 재료 문제가 발생할 가능성이 상대적으로 높은 영역을 식별합니다.

C. 계약 기간 동안 감사 리소스를 최대한 활용할 수 있도록 돕습니다.

D. 감사 대상자 회의의 우선순위를 정하고 일정을 정하는 데 도움이 됩니다.

CISA-KR 문제 563

조직의 정보 보안 정책의 적정성을 평가할 때 IS 감사자가 고려해야 할 가장 중요한 사항은 무엇입니까?

A. IT 운영위원회 회의록

B. 사업 목표

C. IT 전술 계획과의 일치

D. 업계 모범 사례 준수

정답: B

The most important consideration for an IS auditor when assessing the adequacy of an organization's information security policy is the business objectives. An information security policy is a document that defines the organization's approach to protecting its information assets from internal and external threats. It should align with the organization's mission, vision, values, and goals, and support its business processes and functions1. An informationsecurity policy should also be focused on the business needs and requirements of the organization, rather than on technical details orspecific solutions2.
The other options are not as important as the business objectives, because they do not directly reflect the organization's purpose and direction. IT steering committee minutes are records of the discussions and decisions made by a group of senior executives who oversee the IT strategy and governance of the organization. They may provide some insights into the information security policy, but they are not sufficientto evaluate its adequacy3. Alignment with the IT tactical plan is a measure of how well the information security policy supports the short-term actions and projects that implement the IT strategy. However, the IT tactical plan itself shouldbe aligned with the business objectives, and not vice versa4. Compliance with industry best practice is a desirable quality of an information security policy, but it is not a guarantee of its effectiveness or suitability for the organization. Industry best practices are general guidelines or recommendations that may not apply to every organization or situation. An information security policy should be customized and tailored to the specific context and needs of the organization. References:
* The 12 Elements of an Information Security Policy | Exabeam1
* 11 Key Elements of an Information Security Policy | Egnyte2
* What is an IT steering committee? Definition, roles & responsibilities ...3
* What is IT Strategy? Definition, Components & Best Practices | BMC ...4
* IT Security Policy: Key Components & Best Practices for Every Business

CISA-KR 문제 564

다음 중 직원이 없는 컴퓨터실에 가장 적합하고 효과적인 화재 진압 방법은 무엇입니까?

A. 물뿌리개

B. 소화기

C. 이산화탄소(CO2)

D. 건조 파이프

정답: C

The most appropriate and effective fire suppression method for an un-staffed computer room is carbon dioxide (CO2). Carbon dioxide is a gaseous clean agent that extinguishes fire by displacing oxygen and reducing the combustion process. Carbon dioxide is suitable for un-staffed computer rooms because it does not leave any residue, damage, or corrosion on the electronic equipment, and it does not require water or other chemicals that could harm the environment or human health. However, carbon dioxide can pose a risk of asphyxiation to any person who may enter the computer room during or after the discharge, so proper safety precautions and warning signs should be in place.
The other options are not as appropriate or effective as carbon dioxide for an un-staffed computer room:
* Water sprinkler. This is a common fire suppression method that uses water to cool down and extinguish fire. However, water sprinkler is not suitable for un-staffed computer rooms because it can cause severe damage to the electronic equipment, such as short circuits, corrosion, or data loss. Water sprinkler can also create a risk of electric shock to any person who may enter the computer room during or after the discharge.
* Fire extinguishers. These are portable devices that contain a pressurized agent that can be sprayed on a fire to put it out. However, fire extinguishers are not effective for un-staffed computer rooms because they require manual operation by a trained person who can identify the type and location of the fire, and use the appropriate extinguisher. Fire extinguishers can also cause damage to the electronic equipment if they contain water or chemical agents.
* Dry pipe. This is a type of sprinkler system that uses pressurized air or nitrogen in the pipes instead of water until a fire is detected. When a fire is detected, the air or nitrogen is released and water flows into the pipes and sprinklers. However, dry pipe is not ideal for un-staffed computer rooms because it still uses water as the extinguishing agent, which can damage the electronic equipment as mentioned above.
Dry pipe also has a slower response time than wet pipe sprinkler systems, which can allow the fire to spread more quickly.

CISA-KR 문제 565

IS 감사원은 애플리케이션 개발 비용이 이제 예산을 상당히 초과할 것으로 예상된다는 것을 발견했습니다. 다음 중 고위 경영진에게 전달해야 할 가장 큰 위험은 무엇입니까?

A. 기대하는 이익을 달성할 수 없음

B. 프로젝트 방법론 미준수

C. 직원 이직률 증가

D. 프로젝트 중단

다른 버전: 196ISACA.CISA-KR.v2026-08-15.q712; 4135ISACA.CISA-KR.v2026-05-16.q709; 1823ISACA.CISA-KR.v2026-05-06.q261; 3156ISACA.CISA-KR.v2026-03-16.q665; 4542ISACA.CISA-KR.v2026-03-07.q651; 9321ISACA.CISA-KR.v2025-04-07.q633; 4474ISACA.CISA-KR.v2025-04-03.q628; 3719ISACA.CISA-KR.v2025-04-02.q544; 4249ISACA.CISA-KR.v2025-03-31.q534; 3247ISACA.CISA-KR.v2025-03-19.q581; 4051ISACA.CISA-KR.v2025-03-03.q807; 5215ISACA.CISA-KR.v2024-02-07.q421; 2871ISACA.CISA-KR.v2024-01-31.q392; 5386ISACA.CISA-KR.v2023-10-24.q329; 5229ISACA.CISA-KR.v2023-07-31.q266; 3228ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 196ISACA.CISA-KR.v2026-08-15.q712; 150Microsoft.MS-700-KR.v2026-08-15.q203; 125Microsoft.AZ-305-KR.v2026-08-14.q177; 180Microsoft.DP-900-KR.v2026-08-13.q130; 278Microsoft.PL-600.v2026-08-11.q206; 217Microsoft.DP-100.v2026-08-11.q160; 186Oracle.1Z0-1048-25.v2026-08-11.q68; 159ISQI.CTAL-TAE.v2026-08-11.q37; 200ServiceNow.CIS-HR.v2026-08-11.q84; 263Salesforce.Plat-Arch-201.v2026-08-10.q101