CISA-KR 문제 301
IS 감사자는 다양한 프로그램에서 사용되는 다양한 기술에 대한 전반적인 개요를 얻기 위해 다음 중 가장 먼저 면접해야 할 직원은 누구입니까?
정답: C
CISA-KR 문제 302
어떤 유형의 공격이 조직의 가장 민감한 데이터에 가장 큰 위험을 초래할 수 있을까요?
정답: C
An insider attack poses the greatest risk to an organization's most sensitive data. An insider attack is a type of cyberattack that is carried out by someone who has legitimate access to the organization's network, systems, or data, such as an employee, contractor, or business partner. An insider attack can be intentional or unintentional, malicious or negligent, and can have various motives, such as financial gain, revenge, espionage, sabotage, or curiosity.
An insider attack poses the greatest risk to an organization's most sensitive data because:
An insider has a high level of trust and privilege within the organization, which allows them to bypass security controls and access confidential or restricted data without raising suspicion or detection.
An insider has a deep knowledge of the organization's operations, processes, policies, and vulnerabilities, which enables them to exploit them effectively and cause maximum damage or disruption.
An insider can use various techniques and tools to conceal their identity and actions, such as encryption, steganography, deletion, or alteration of logs or evidence.
An insider can cause significant harm or loss to the organization in terms of data integrity, availability, confidentiality, reputation, compliance, and profitability.
According to the 2023 Cost of Insider Threats Global Report by Ponemon Institute and ObserveIT 1, the average annual cost of insider threats for organizations worldwide was $11.45 million in 2022, a 31% increase from 2018. The report also found that the average number of incidents per organization was 77 in 2022, a
47% increase from 2018. The report classified insider threats into three categories: careless or negligent employees or contractors, criminal or malicious insiders, and credential thieves. The report revealed that careless or negligent insiders were the most common and costly type of insider threat, accounting for 62% of all incidents and $4.58 million in costs.
The other options are not the greatest risk to an organization's most sensitive data, although they can still pose significant threats.
A password attack is a type of cyberattack that attempts to guess or crack a user's password to gain unauthorized access to their account or system. A password attack can use various methods, such as brute force, dictionary, rainbow table, phishing, keylogging, or social engineering. A password attack can compromise the security and privacy of the user's data and information. However, a password attack can be prevented or mitigated by using strong and unique passwords, changing passwords frequently, enabling multi- factor authentication (MFA), and avoiding clicking on suspicious links or attachments.
An eavesdropping attack is a type of cyberattack that intercepts or monitors the communication between two parties without their knowledge or consent. An eavesdropping attack can use various techniques, such as wiretapping, packet sniffing, man-in-the-middle (MITM), or side-channel. An eavesdropping attack can expose the content and metadata of the communication, such as messages, files, voice calls, emails, etc.
However, an eavesdropping attack can be prevented or mitigated by using encryption, authentication, digital signatures, VPNs (virtual private networks), or secure protocols.
A spear phishing attack is a type of phishing attack that targets a specific individual or group with personalized and convincing emails that appear to come from a trusted source. A spear phishing attack aims to trick the recipient into clicking on a malicious link or attachment that can infect their device with malware or steal their credentials or data. A spear phishing attack can compromise the security and privacy of the recipient's data and information. However, a spear phishing attack can be prevented or mitigated by verifying the sender's identity and email address, checking the email content for spelling and grammar errors, hovering over links before clicking on them (or not clicking at all), scanning attachments for viruses before opening them (or not opening at all), and reporting suspicious emails to IT security staff.
An insider attack poses the greatest risk to an organization's most sensitive data because:
An insider has a high level of trust and privilege within the organization, which allows them to bypass security controls and access confidential or restricted data without raising suspicion or detection.
An insider has a deep knowledge of the organization's operations, processes, policies, and vulnerabilities, which enables them to exploit them effectively and cause maximum damage or disruption.
An insider can use various techniques and tools to conceal their identity and actions, such as encryption, steganography, deletion, or alteration of logs or evidence.
An insider can cause significant harm or loss to the organization in terms of data integrity, availability, confidentiality, reputation, compliance, and profitability.
According to the 2023 Cost of Insider Threats Global Report by Ponemon Institute and ObserveIT 1, the average annual cost of insider threats for organizations worldwide was $11.45 million in 2022, a 31% increase from 2018. The report also found that the average number of incidents per organization was 77 in 2022, a
47% increase from 2018. The report classified insider threats into three categories: careless or negligent employees or contractors, criminal or malicious insiders, and credential thieves. The report revealed that careless or negligent insiders were the most common and costly type of insider threat, accounting for 62% of all incidents and $4.58 million in costs.
The other options are not the greatest risk to an organization's most sensitive data, although they can still pose significant threats.
A password attack is a type of cyberattack that attempts to guess or crack a user's password to gain unauthorized access to their account or system. A password attack can use various methods, such as brute force, dictionary, rainbow table, phishing, keylogging, or social engineering. A password attack can compromise the security and privacy of the user's data and information. However, a password attack can be prevented or mitigated by using strong and unique passwords, changing passwords frequently, enabling multi- factor authentication (MFA), and avoiding clicking on suspicious links or attachments.
An eavesdropping attack is a type of cyberattack that intercepts or monitors the communication between two parties without their knowledge or consent. An eavesdropping attack can use various techniques, such as wiretapping, packet sniffing, man-in-the-middle (MITM), or side-channel. An eavesdropping attack can expose the content and metadata of the communication, such as messages, files, voice calls, emails, etc.
However, an eavesdropping attack can be prevented or mitigated by using encryption, authentication, digital signatures, VPNs (virtual private networks), or secure protocols.
A spear phishing attack is a type of phishing attack that targets a specific individual or group with personalized and convincing emails that appear to come from a trusted source. A spear phishing attack aims to trick the recipient into clicking on a malicious link or attachment that can infect their device with malware or steal their credentials or data. A spear phishing attack can compromise the security and privacy of the recipient's data and information. However, a spear phishing attack can be prevented or mitigated by verifying the sender's identity and email address, checking the email content for spelling and grammar errors, hovering over links before clicking on them (or not clicking at all), scanning attachments for viruses before opening them (or not opening at all), and reporting suspicious emails to IT security staff.
CISA-KR 문제 303
용량 관리 도구는 주로 다음을 보장하기 위해 사용됩니다.
정답: A
Capacity management tools are primarily used to ensure that available resources are used efficiently and effectively to meet the current and future demands of the business. Capacity management tools can help monitor, analyze and optimize the performance and utilization of IT resources such as CPU, memory, disk, network, etc. The other options are not the primary purpose of capacity management tools, although they may be related or derived from them. References:
* ISACA, CISA Review Manual, 27th Edition, chapter 4, section 4.32
* ISACA, COBIT 2019 Framework: Introduction and Methodology, section 3.2
* ISACA, CISA Review Manual, 27th Edition, chapter 4, section 4.32
* ISACA, COBIT 2019 Framework: Introduction and Methodology, section 3.2
CISA-KR 문제 304
조직에서 새로운 데이터 유출 방지(DLP) 도구를 구현하고 있습니다. 다음 중 어느 것이 조직에서 거짓 양성 경고를 줄이는 데 가장 효과적일까요?
정답: B
To reduce false positive alerts, it is essential to carefully configure a limited set of rules tailored to the organization's specific data loss prevention needs. This ensures that the DLP tool accurately identifies true positives and reduces the occurrence of false alarms.
References
* ISACA CISA Review Manual 27th Edition, Page 304-305 (DLP Tool Configuration)
References
* ISACA CISA Review Manual 27th Edition, Page 304-305 (DLP Tool Configuration)
CISA-KR 문제 305
방화벽이 조직의 보안 정책을 준수하도록 구성되었는지 확인하기 위한 가장 좋은 감사 절차는 다음 중 무엇입니까?
정답: A
The best audit procedure to determine whether a firewall is configured in compliance with the organization's security policy is reviewing the parameter settings. Parameter settings are values or options that define how a firewall operates and functions, such as rules, filters, ports, protocols, etc. By reviewing the parameter settings of a firewall, an IS auditor can verify whether they match with the organization's security policy, which is a document that outlines the security objectives, requirements, and guidelines for an organization's information systems and resources. Reviewing the system log is a possible audit procedure to determine whether a firewall is configured in compliance with the organization's security policy, but it is not the best one, as a system log records events or activities that occur on a firewall, such as connections, requests, responses, errors, alerts, etc., and may not indicate whether they comply with the organization's security policy. Interviewing the firewall administrator is a possible audit procedure to determine whether a firewall is configured in compliance with the organization's security policy, but it is not the best one, as a firewall administrator may not provide accurate or reliable information about the firewall configuration, and may have conflicts of interest or ulterior motives. Reviewing the actual procedures is a possible audit procedure to determine whether a firewall is configured in compliance with the organization's security policy, but it is not the best one, as actual procedures describe how a firewall is configured and maintained, such as installation, testing, updating, etc., and may not reflect whether they comply with the organization's security policy.
- 다른 버전
- 2323ISACA.CISA-KR.v2026-08-27.q676
- 4388ISACA.CISA-KR.v2026-08-15.q712
- 6892ISACA.CISA-KR.v2026-05-16.q709
- 2724ISACA.CISA-KR.v2026-05-06.q261
- 4615ISACA.CISA-KR.v2026-03-16.q665
- 6612ISACA.CISA-KR.v2026-03-07.q651
- 11024ISACA.CISA-KR.v2025-04-07.q633
- 5689ISACA.CISA-KR.v2025-04-03.q628
- 4739ISACA.CISA-KR.v2025-04-02.q544
- 6662ISACA.CISA-KR.v2025-03-28.q617
- 4284ISACA.CISA-KR.v2025-03-19.q581
- 5445ISACA.CISA-KR.v2025-03-03.q807
- 6020ISACA.CISA-KR.v2024-02-07.q421
- 3612ISACA.CISA-KR.v2024-01-31.q392
- 5925ISACA.CISA-KR.v2023-10-24.q329
- 5714ISACA.CISA-KR.v2023-07-31.q266
- 3813ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 119Oracle.1Z0-1048-26.v2026-10-17.q66
- 137Splunk.SPLK-3003.v2026-10-17.q106
- 149Nokia.SRAN-Radio-Network-Performance-Optimization.v2026-10-16.q18
- 167Pegasystems.PEGACPRSA22V1.v2026-10-16.q33
- 183PaloAltoNetworks.XSIAM-Analyst.v2026-10-15.q75
- 222Splunk.SPLK-1002.v2026-10-15.q187
- 151Workday.Workday-Adaptive-Planning.v2026-10-15.q23
- 152AIChE.CCPSC.v2026-10-15.q37
- 216API.API-571.v2026-10-15.q131
- 137Microsoft.AB-210.v2026-10-14.q58
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-03-31.q534 모의시험 시험자료를 다운 받으세요.