무료 온라인 액세스 ISACA.CISA-KR.v2025-04-02.q544 모의 시험 (Page 49)

CISA-KR 문제 236

IT 거버넌스 프레임워크를 구현하려면 조직의 이사회가 다음을 수행해야 합니다.

A. 기술적인 IT 문제를 해결합니다.

B. 모든 IT 이니셔티브에 대해 알아보세요.

C. IT 전략 위원회를 구성하세요.

D. IT 전략을 승인합니다.

CISA-KR 문제 237

현재 시스템의 병렬 실행을 수행하는 주된 목적은 무엇입니까?

A. 최종 사용자와 지원 직원에게 새 시스템을 교육합니다.

B. 새로운 시스템이 필요한 비즈니스 기능을 제공하는지 확인합니다.

C. 추가 테스트의 필요성을 줄이기 위해

D. 이전 시스템과 새로운 시스템을 검증하려면

정답: D

The primary purpose of performing a parallel run of a new system is to validate the new system against its predecessor. A parallel run is a strategy for system changeover where a new system slowly assumes the roles of the older system while both systems operate simultaneously. This allows for comparison of the results and outputs of both systems to ensure that the new system is working correctly and reliably. A parallel run can also help identify and resolve any errors, discrepancies, or inconsistencies in the new system before the old system is discontinued.
The other options are not the primary purpose of performing a parallel run of a new system. A. To train the end users and supporting staff on the new system. Training is an important part of system implementation, but it is not the main reason for doing a parallel run. Training can be done before, during, or after the parallel run, depending on the needs and preferences of the organization. B. To verify the new system provides required business functionality. Verifying the business functionality of the new system is part of user acceptance testing (UAT), which is a formal and structured process of testing whether the new system meets the specifications and expectations of the users and stakeholders. UAT is usually done before the parallel run, as a prerequisite for system changeover. C. To reduce the need for additional testing. Reducing the need for additional testing is not the primary purpose of performing a parallel run, but rather a possible benefit or outcome of doing so. A parallel run can help ensure that the new system is thoroughly tested and validated in a real-worldenvironment, which may reduce the likelihood of encountering major issues or defects later on.
However, additional testing may still be needed after the parallel run, depending on the feedback and evaluation of the users and stakeholders.
References:
* ISACA, CISA Review Manual, 27th Edition, 2019, p. 2471
* IS

CISA-KR 문제 238

사건 관리 감사 중에 IS 감사자는 감사 기간 동안 여러 개의 유사한 사건이 기록되었음을 발견했습니다. 다음 중 감사자의 가장 중요한 조치 방침은 무엇입니까?

A. 조사 결과를 문서화하여 경영진에게 제시하세요.

B. 근본 원인 분석이 수행되었는지 확인하세요.

C. 사고 해결 시간을 확인하세요.

D. 모든 인시던트가 조치되었는지 확인합니다.

CISA-KR 문제 239

다음 중 데이터 복구 프로세스의 효과를 확인하는 가장 좋은 방법은 무엇입니까?

A. 백업 미디어에 대한 물리적 액세스에 대한 주기적 검토 수행

B. 주기적 전체 데이터 복원 수행

C. 소프트웨어 유틸리티를 사용하여 오프 백업 검증

D. 매년 데이터 복구 정책 검토 및 업데이트

정답: B

The best way to verify the effectiveness of a data restoration process is to perform periodic complete data restorations. This is the process of transferring backup data to the primary system or data center and verifying that the restored data is accurate, complete, and functional. By performing periodic complete data restorations, the auditee can test the reliability and validity of the backup data, the functionality and performance of the restoration tools and procedures, and the compatibility and integrity of the restored data with the primary system. This will also help identify and resolve any issues or errors that may occur during the restoration process, such as corrupted or missing files, incompatible formats, or configuration problems.
Performing periodic reviews of physical access to backup media (option A) is not the best way to verify the effectiveness of a data restoration process, as it only ensures the security and availability of the backup media, not the quality or usability of the backup data. Physical access reviews are important for preventing unauthorized access, theft, damage, or loss of backup media, but they do not test the actual restoration process or verify that the backup data can be successfully restored.
Validating offline backups using software utilities (option C) is also not the best way to verify the effectiveness of a data restoration process, as it only checks the integrity and consistency of the backup data, not the functionality or compatibility of the restored data. Software utilities can help detect and correct any errors or inconsistencies in the backup data, such as checksum errors, duplicate files, or incomplete backups, but they do not test the actual restoration process or verify that the restored data can work with the primary system.
Reviewing and updating data restoration policies annually (option D) is also not the best way to verify the effectiveness of a data restoration process, as it only ensures that the policies are current and relevant, not that they are implemented and followed. Data restoration policies are important for defining roles and responsibilities, objectives and scope, standards and procedures, and metrics and reporting for the restoration process, but they do not test the actual restoration process or verify that it meets the expected outcomes.
Therefore, option B is the correct answer.
References:
* Whatis backup and disaster recovery? | IBM
* Backup and Recovery of Data: The Essential Guide | Veritas
* Database Backup and Recovery Best Practices - ISACA

CISA-KR 문제 240

시스템 관리자가 네트워크 관리자의 책임을 맡는 데 따른 위험을 줄이기 위한 가장 효율적인 제어 방법은 다음 중 무엇입니까?

A. 관리자는 중요한 변경 사항에 대해 추가 승인을 요청해야 합니다.

B. 관리자는 사전 통보 없이 감사를 받게 됩니다.

C. 관리자는 중요한 변경을 하기 위해 임시 액세스 권한을 얻어야 합니다.

D. 관리자는 실사 계약서에 서명해야 합니다.

다른 버전: 225ISACA.CISA-KR.v2026-08-15.q712; 4217ISACA.CISA-KR.v2026-05-16.q709; 1827ISACA.CISA-KR.v2026-05-06.q261; 3194ISACA.CISA-KR.v2026-03-16.q665; 4657ISACA.CISA-KR.v2026-03-07.q651; 9347ISACA.CISA-KR.v2025-04-07.q633; 4493ISACA.CISA-KR.v2025-04-03.q628; 4285ISACA.CISA-KR.v2025-03-31.q534; 5432ISACA.CISA-KR.v2025-03-28.q617; 3257ISACA.CISA-KR.v2025-03-19.q581; 4061ISACA.CISA-KR.v2025-03-03.q807; 5218ISACA.CISA-KR.v2024-02-07.q421; 2872ISACA.CISA-KR.v2024-01-31.q392; 5391ISACA.CISA-KR.v2023-10-24.q329; 5231ISACA.CISA-KR.v2023-07-31.q266; 3231ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 225ISACA.CISA-KR.v2026-08-15.q712; 167Microsoft.MS-700-KR.v2026-08-15.q203; 132Microsoft.AZ-305-KR.v2026-08-14.q177; 190Microsoft.DP-900-KR.v2026-08-13.q130; 290Microsoft.PL-600.v2026-08-11.q206; 221Microsoft.DP-100.v2026-08-11.q160; 188Oracle.1Z0-1048-25.v2026-08-11.q68; 160ISQI.CTAL-TAE.v2026-08-11.q37; 202ServiceNow.CIS-HR.v2026-08-11.q84; 281Salesforce.Plat-Arch-201.v2026-08-10.q101