CISA-KR 문제 456
Astress testevaluates system performance under extreme conditions, such as high user loads, to determine how the system behaves under peak traffic or resource exhaustion.
* Stress Testing (Correct Answer - A)
* Identifies performance bottlenecks in software applications.
* Helps ensure the ERP system can handle expected workloads.
* Example:Simulating thousands of concurrent users accessing the ERP system to test response times and server load capacity.
* Parallel Testing (Incorrect - B)
* Compares a new system with an old one but does not test system performance under load.
* Regression Testing (Incorrect - C)
* Tests whether recent code changes have affected existing functionality but does not focus on performance.
* Interface Testing (Incorrect - D)
* Checks interactions between system components but does not measure performance.
References:
* ISACA CISA Review Manual
* COBIT 2019: Performance and Capacity Planning
* NIST 800-37 (Risk Management Framework)
CISA-KR 문제 457
Historical transactions are transactions that have been processed and recorded by the old system in the past.
Running historical transactions through the new system can provide the most assurance over the completeness and accuracy of loan application processing, by comparing the results and outputs of the new system with those of the old system, and verifying whether they match or differ. This can help identify and resolve any errors or issues that may arise from the new system, such as data conversion, functionality, compatibility, etc.
Comparing code between old and new systems is a possible way to obtain some assurance over the completeness and accuracy of loan application processing with respect to the implementation of a new system, but it is not the most effective one. Code is a set of instructions or commands that define how a system operates or functions. Comparing code between old and new systems can provide some assurance over the completeness and accuracy of loan application processing, by checking whether the logic, algorithms, or functions of the new system are consistent or equivalent with those of the old system. However, this may not be sufficient or reliable, as code may not reflect the actual performance or outcomes of the system, and may not detect any errors or issues that may occur at the data or user level. Reviewing quality assurance (QA) procedures is a possible way to obtain some assurance over the completeness and accuracy of loan application processing with respect to the implementation of a new system, but it is not the most effective one. QA procedures are steps or activities that ensure that a system meets its quality standards and requirements, such as testing, verification, validation, etc. Reviewing QA procedures can provide some assurance over the completeness and accuracy of loan application processing, by evaluating whether the new system has been properly tested and verified before implementation. However, this may not be adequate or accurate, as QA procedures may not cover all aspects or scenarios of loan application processing, and may not reveal any errors or issues that may arise after implementation. Loading balance and transaction data to the new system is a possible way to obtain some assurance over the completeness and accuracy of loan application processing with respect to the implementation of a new system, but it is not the most effective one. Balance and transaction data are data that reflect the status and history of loan applications in a system, such as amounts, dates, payments, etc. Loading balance and transaction data to the new system can provide some assurance over the completeness and accuracy of loan application processing, by transferring data from the old system to the new system and ensuring that they are consistent and correct. However, this may not be enough or valid, as balance and transaction data may not represent all aspects or features of loan application processing, and may not indicate any errors or issues that may arise
CISA-KR 문제 458
References
1: Year-end closing procedures for GL - Dynamics GP | Microsoft Learn1 2: Year-end activities FAQ - Finance | Dynamics 365 | Microsoft Learn2 3: Year-End Closing Checklist: 10 Steps to Close Your Books3 :
Year End Closing Checklist: 7 Steps to Make it Easy
CISA-KR 문제 459
CISA-KR 문제 460
The other options are less reliable ways for an IS auditor to evaluate the operational effectiveness of an organization's DLP controls. Reviewing data classification levels based on industry best practice is a way to assess the adequacy of the organization's data protection policies, but it does not measure how well the DLP controls are implemented or enforced in practice. Verifying that current DLP software is installed on all computer systems is a way to check the technical configuration of the DLP solution, but it does not test how well the DLP software detects and prevents data loss incidents in real scenarios. Conducting interviews to identify possible data protection vulnerabilities is a way to gather qualitative information from stakeholders, but it does not provide quantitative or empirical data on the actual performance of the DLP controls.
References:
What is Data Loss Prevention (DLP)? [Guide] - CrowdStrike
- 다른 버전
- 327ISACA.CISA-KR.v2026-08-15.q712
- 4350ISACA.CISA-KR.v2026-05-16.q709
- 1874ISACA.CISA-KR.v2026-05-06.q261
- 3349ISACA.CISA-KR.v2026-03-16.q665
- 4746ISACA.CISA-KR.v2026-03-07.q651
- 9450ISACA.CISA-KR.v2025-04-07.q633
- 3811ISACA.CISA-KR.v2025-04-02.q544
- 4318ISACA.CISA-KR.v2025-03-31.q534
- 5531ISACA.CISA-KR.v2025-03-28.q617
- 3316ISACA.CISA-KR.v2025-03-19.q581
- 4199ISACA.CISA-KR.v2025-03-03.q807
- 5247ISACA.CISA-KR.v2024-02-07.q421
- 2940ISACA.CISA-KR.v2024-01-31.q392
- 5443ISACA.CISA-KR.v2023-10-24.q329
- 5263ISACA.CISA-KR.v2023-07-31.q266
- 3262ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 154Microsoft.AZ-305-KR.v2026-08-17.q162
- 154IIA.IAA-IAP-KR.v2026-08-17.q41
- 327ISACA.CISA-KR.v2026-08-15.q712
- 261Microsoft.MS-700-KR.v2026-08-15.q203
- 192Microsoft.AZ-305-KR.v2026-08-14.q177
- 260Microsoft.DP-900-KR.v2026-08-13.q130
- 322Microsoft.PL-600.v2026-08-11.q206
- 288Microsoft.DP-100.v2026-08-11.q160
- 212Oracle.1Z0-1048-25.v2026-08-11.q68
- 182ISQI.CTAL-TAE.v2026-08-11.q37
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-04-03.q628 모의시험 시험자료를 다운 받으세요.