CISA-KR 문제 31
The other options are not as effective as encryption in protecting data confidentiality while transporting data.
Cryptographic hashes are mathematical functions that generate a fixed-length output from an input, but they do not encrypt the data. Hashes are used to verify the integrity and authenticity of data, but they do not prevent unauthorized access to the data. Virtual local area network (VLAN) is a logical grouping of network devices that share the same broadcast domain, but they do not encrypt the data. VLANs can improve network performance and security by isolating traffic, but they do not protect the data from being intercepted or modified by external attackers. Dedicated lines are physical connections that provide exclusive access to a network or service, but they do not encrypt the data. Dedicated lines can offer higher bandwidth and reliability, but they do not guarantee the confidentiality of the data from being compromised by physical tampering or eavesdropping.
References:
* ISACA, CISA Review Manual, 27th Edition, 2019, p. 2471
* ISACA, CISA Review Questions, Answers & Explanations Database - 12 Month Subscription2
* Data Security and Confidentiality Guidelines - Centers for Disease Control and Prevention3
* Information Security | Confidentiality - GeeksforGeeks4
CISA-KR 문제 32
References
What is a digital signature?
Digital Signature - an overview | ScienceDirect Topics
ISACA CISA Review Manual, 27th Edition, page 253
CISA-KR 문제 33
One of the key activities of a configuration management system is to define baselines for software. A baseline is a fixed reference point that serves as a basis for comparison and measurement. A baseline can be established for any configuration item, such as a requirement, a design document, a test plan, or a software component. A baseline helps to ensure that the software product meets its intended purpose and quality standards, and that any changes to the software are controlled and documented.
A configuration management system also supports other activities, such as tracking software updates, supporting the release procedure, and standardizing change approval, but these are not its primary purpose.
Therefore, the other options are incorrect.
References: : What is configuration management - Red Hat : Configuration Management | Definition, Importance & Benefits - ServerWatch
CISA-KR 문제 34
DLP (Data Loss Prevention) toolsare designed toprevent unauthorized access, transfer, or leakage of sensitive data, especially byinsider threatsorunauthorized downloads.
* Preventing Unauthorized Downloads (Correct Answer - C)
* DLP solutionsblock or log attemptsto transfer sensitive files.
* Example:A DLP tool detects andblocks an employee from copying confidential data to a USB drive.
* Preventing Malware Installation (Incorrect - A, B)
* Antivirus and endpoint protection tools, not DLP, handle malware threats.
* Preventing Corrupt Data Transmission (Incorrect - D)
* DLP focuses ondata protection, not detecting corrupt files.
References:
* ISACA CISA Review Manual
* NIST 800-53 (Data Protection Controls)
* CIS (Center for Internet Security) DLP Best Practices
CISA-KR 문제 35
Theprimary roleof an internalIS audit functionis to provideindependent assuranceonrisk management, internal controls, and governance processes.
* Option A (Incorrect):While audits may identifycontrol improvements, they donot initiate changes; management is responsible for implementation.
* Option B (Incorrect):Compliance audits arepartof IS auditing, but the main focus isassurance on risk and controls, not just compliance.
* Option C (Incorrect):Best practices and standards reviews are useful, but theydo not definethecore objectiveof an internal audit.
* Option D (Correct):The internal audit function'smain goalis toassess and assurethe effectiveness of an organization'srisk management and internal controls.
Reference:ISACA CISA Review Manual -Domain 1: Information Systems Auditing Process- Coversaudit objectives, assurance functions, and risk management.
- 다른 버전
- 3950ISACA.CISA-KR.v2026-05-16.q709
- 1794ISACA.CISA-KR.v2026-05-06.q261
- 3117ISACA.CISA-KR.v2026-03-16.q665
- 4484ISACA.CISA-KR.v2026-03-07.q651
- 9201ISACA.CISA-KR.v2025-04-07.q633
- 4444ISACA.CISA-KR.v2025-04-03.q628
- 4215ISACA.CISA-KR.v2025-03-31.q534
- 5320ISACA.CISA-KR.v2025-03-28.q617
- 3146ISACA.CISA-KR.v2025-03-19.q581
- 3968ISACA.CISA-KR.v2025-03-03.q807
- 5130ISACA.CISA-KR.v2024-02-07.q421
- 2794ISACA.CISA-KR.v2024-01-31.q392
- 5263ISACA.CISA-KR.v2023-10-24.q329
- 5209ISACA.CISA-KR.v2023-07-31.q266
- 3099ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 152Microsoft.DP-900-KR.v2026-08-13.q130
- 244Microsoft.PL-600.v2026-08-11.q206
- 183Microsoft.DP-100.v2026-08-11.q160
- 177Oracle.1Z0-1048-25.v2026-08-11.q68
- 145ISQI.CTAL-TAE.v2026-08-11.q37
- 195ServiceNow.CIS-HR.v2026-08-11.q84
- 258Salesforce.Plat-Arch-201.v2026-08-10.q101
- 244Databricks.Databricks-Machine-Learning-Professional.v2026-08-10.q76
- 192F5.F5CAB2.v2026-08-10.q41
- 299APA.CPP-Remote.v2026-08-08.q109
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-04-02.q544 모의시험 시험자료를 다운 받으세요.