CISA-KR 문제 141
Therefore, it is essential that logs are stored in a separate host that is isolated and secured from the network and the firewall itself, to prevent unauthorized access or modification of the logs. Automated alerts are being sent when a risk is detected is a good practice for enhancing the security and efficiency of a firewall, but it is not the most important thing for an IS auditor to verify, as alerts may not always be accurate, timely, or actionable. Insider attacks are being controlled is a desirable outcome for a firewall, but it is not the most important thing for an IS auditor to verify, as insider attacks may involve other factors or methods that bypass or compromise the firewall, such as social engineering, credential theft, or physical access. Access to configuration files is restricted is a critical control for ensuring the security and integrity of a firewall, but it is not the most important thing for an IS auditor to verify, as configuration files may not reflect the actual state or performance of the firewall.
CISA-KR 문제 142
References: ISACA Frameworks: Blueprints for Success, CISA Review Manual (Digital Version)
CISA-KR 문제 143
호스팅된 애플리케이션에 급여 감사 문서를 업로드하는 것과 관련하여 가장 중요한 고려 사항은 무엇입니까?
Privacy regulations may also grant various rights to the data subjects, such as accessing, correcting, deleting, or transferring their data. Failing to comply with privacy regulations may expose the organization to significant risks and consequences, such as legal actions, fines, sanctions, reputational damage, or loss of trust.
Some examples of privacy regulations affecting the organization are:
* The General Data Protection Regulation (GDPR), which is a comprehensive and strict privacy regulation that applies to any organization that processes personal data of individuals in the European Union (EU) or offers goods or services to them, regardless of where the organization or the data is located1.
* The California Consumer Privacy Act (CCPA), which is a broad and influential privacy regulation that applies to any organization that collects personal information of California residents and meets certain thresholds of revenue, data volume, or data sharing2.
* The Health Insurance Portability and Accountability Act (HIPAA), which is a sector-specific privacy regulation that applies to any organization that handles protected health information (PHI) of individuals in the United States, such as health care providers, health plans, or health care clearinghouses3.
Therefore, before using an audit management application hosted by a third party in a different country, the internal audit team should conduct a thorough assessment of the privacy regulations affecting the organization and ensure that they have adequate policies, procedures, and controls in place to comply with them.
CISA-KR 문제 144
References:
* 10: Business Impact Analysis (BIA): Prepare for Anything [2023] * Asana
* 11: Definition of Business Impact Analysis (BIA) - IT Glossary | Gartner Information Technology
* 12: Business impact analysis (BIA) is a method to predict the consequences of disruptions to a business, its processes and systems by collecting relevant data.
CISA-KR 문제 145
- 다른 버전
- 2302ISACA.CISA-KR.v2026-08-27.q676
- 4354ISACA.CISA-KR.v2026-08-15.q712
- 6862ISACA.CISA-KR.v2026-05-16.q709
- 2716ISACA.CISA-KR.v2026-05-06.q261
- 4594ISACA.CISA-KR.v2026-03-16.q665
- 6568ISACA.CISA-KR.v2026-03-07.q651
- 11001ISACA.CISA-KR.v2025-04-07.q633
- 5671ISACA.CISA-KR.v2025-04-03.q628
- 4727ISACA.CISA-KR.v2025-04-02.q544
- 6645ISACA.CISA-KR.v2025-03-28.q617
- 4277ISACA.CISA-KR.v2025-03-19.q581
- 5420ISACA.CISA-KR.v2025-03-03.q807
- 6001ISACA.CISA-KR.v2024-02-07.q421
- 3608ISACA.CISA-KR.v2024-01-31.q392
- 5919ISACA.CISA-KR.v2023-10-24.q329
- 5709ISACA.CISA-KR.v2023-07-31.q266
- 3797ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 110Nokia.SRAN-Radio-Network-Performance-Optimization.v2026-10-16.q18
- 113Pegasystems.PEGACPRSA22V1.v2026-10-16.q33
- 174PaloAltoNetworks.XSIAM-Analyst.v2026-10-15.q75
- 188Splunk.SPLK-1002.v2026-10-15.q187
- 134Workday.Workday-Adaptive-Planning.v2026-10-15.q23
- 140AIChE.CCPSC.v2026-10-15.q37
- 209API.API-571.v2026-10-15.q131
- 129Microsoft.AB-210.v2026-10-14.q58
- 130Huawei.H12-893_V1.0.v2026-10-14.q46
- 168UiPath.UiPath-ADPv1.v2026-10-14.q114
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-03-31.q534 모의시험 시험자료를 다운 받으세요.