CISA-KR 문제 631
다음 중 어느 것을 사용하면 프로세스 개선 프로그램을 가장 잘 향상시킬 수 있을까요?
정답: C
Capability maturity models (CMMs) are frameworks that help organizations assess and improve their processes in various domains, such as software development, project management, service delivery, and cybersecurity1. CMMs define different levels of process maturity, from initial to optimized, and describe the characteristics and best practices of each level. By using CMMs, organizations can benchmark their current processes against a common standard, identify gaps and weaknesses, and implement improvement actions to achieve higher levels of process maturity2. CMMs can also help organizations align their processes with their strategic goals, measure their performance, and increase their efficiency, quality, and customer satisfaction3.
Therefore, the use of CMMs would best enhance a process improvement program, as they provide a systematic and structured approach to evaluate and improve processes based on proven principles and practices. Option C is the correct answer.
Option A is not correct because model-based design notations are graphical or textual languages that help designers specify, visualize, and document the structure and behavior of systems4. While they can be useful for designing and communicating complex systems, they do not directly address the process improvement aspect of a program.
Option B is not correct because balanced scorecard is a strategic management tool that helps organizations translate their vision and mission into measurable objectives and indicators. While it can be useful for monitoring and evaluating the performance of a program, it does not provide specific guidance on how to improve processes.
Option D is not correct because project management methodologies are sets of principles and practices that help organizations plan, execute, and control projects. While they can be useful for managing the scope, schedule, cost, quality, and risk of a program, they do not focus on the process improvement aspect of a program.
References:
Guide to Process Maturity Models2
What is CMMI? A model for optimizing development processes1
Capability Maturity Model (CMM): A Definitive Guide3
Model-Based Design Notations4
Balanced Scorecard
Project Management Methodologies
Therefore, the use of CMMs would best enhance a process improvement program, as they provide a systematic and structured approach to evaluate and improve processes based on proven principles and practices. Option C is the correct answer.
Option A is not correct because model-based design notations are graphical or textual languages that help designers specify, visualize, and document the structure and behavior of systems4. While they can be useful for designing and communicating complex systems, they do not directly address the process improvement aspect of a program.
Option B is not correct because balanced scorecard is a strategic management tool that helps organizations translate their vision and mission into measurable objectives and indicators. While it can be useful for monitoring and evaluating the performance of a program, it does not provide specific guidance on how to improve processes.
Option D is not correct because project management methodologies are sets of principles and practices that help organizations plan, execute, and control projects. While they can be useful for managing the scope, schedule, cost, quality, and risk of a program, they do not focus on the process improvement aspect of a program.
References:
Guide to Process Maturity Models2
What is CMMI? A model for optimizing development processes1
Capability Maturity Model (CMM): A Definitive Guide3
Model-Based Design Notations4
Balanced Scorecard
Project Management Methodologies
CISA-KR 문제 632
주요 재해 발생 시 비즈니스 연속성 계획(BCP)이 효과적으로 작동하도록 하는 가장 좋은 방법은 다음 중 무엇입니까?
정답: B
The best way to ensure that business continuity plans (BCPs) will work effectively in the event of a major disaster is to involve staff at all levels in periodic paper walk-through exercises. This means that the BCPs are tested and validated by the people who will execute them in a real situation, and any gaps, errors, or inconsistencies can be identified and corrected. Paper walk-through exercises are also a good way to raise awareness and train staff on their roles and responsibilities in a BCP scenario, as well as to evaluate the feasibility and effectiveness of the recovery strategies1.
The other options are not the best ways to ensure that BCPs will work effectively, because they do not involve testing or validating the plans. Preparing detailed plans for each business function is important, but it does not guarantee that the plans are realistic, practical, or aligned with the overall business objectives and priorities2. Regularly updating business impact assessments is also essential, but it does not ensure that the BCPs are aligned with the current business environment and risks2. Making senior managers responsible for their plan sections is a good way to assign accountability and authority, but it does not ensure that the plan sections are coordinated and integrated with each other2. References:
* Best Practice Guide: Business Continuity Planning (BCP)3
* Best Practices for Creating a Business Continuity Plan1
* Business Continuity Plan Best Practices
The other options are not the best ways to ensure that BCPs will work effectively, because they do not involve testing or validating the plans. Preparing detailed plans for each business function is important, but it does not guarantee that the plans are realistic, practical, or aligned with the overall business objectives and priorities2. Regularly updating business impact assessments is also essential, but it does not ensure that the BCPs are aligned with the current business environment and risks2. Making senior managers responsible for their plan sections is a good way to assign accountability and authority, but it does not ensure that the plan sections are coordinated and integrated with each other2. References:
* Best Practice Guide: Business Continuity Planning (BCP)3
* Best Practices for Creating a Business Continuity Plan1
* Business Continuity Plan Best Practices
CISA-KR 문제 633
다음 중 조직의 데이터 분류 정책이 데이터 변환 과정에서 유지되도록 하는 가장 좋은 방법은 무엇입니까?
정답: D
Data classification is the process of tagging data according to its type, sensitivity, and value to the organization. Data transformation is the process of changing the structure and format of data to make it usable for analysis and visualization. Both processes are important for data security and compliance, but they also pose some challenges.
One of the challenges is to ensure that the organization's data classification policies are preserved during the process of data transformation. This means that the data should retain its original classification level and labels after it is transformed, and that the appropriate controls and protections are applied to the transformed data.
The best way to ensure this is to implement classification labels in metadata during data creation (D).
Metadata is data that describes other data, such as its source, format, content, and context. By adding classification labels to metadata, the data can be easily identified and tracked throughout its lifecycle, including during data transformation. The labels can also help enforce the proper access rights and encryption standards for the data, regardless of its state or location.
One of the challenges is to ensure that the organization's data classification policies are preserved during the process of data transformation. This means that the data should retain its original classification level and labels after it is transformed, and that the appropriate controls and protections are applied to the transformed data.
The best way to ensure this is to implement classification labels in metadata during data creation (D).
Metadata is data that describes other data, such as its source, format, content, and context. By adding classification labels to metadata, the data can be easily identified and tracked throughout its lifecycle, including during data transformation. The labels can also help enforce the proper access rights and encryption standards for the data, regardless of its state or location.
- 다른 버전
- 2269ISACA.CISA-KR.v2026-08-27.q676
- 4287ISACA.CISA-KR.v2026-08-15.q712
- 6805ISACA.CISA-KR.v2026-05-16.q709
- 2703ISACA.CISA-KR.v2026-05-06.q261
- 4558ISACA.CISA-KR.v2026-03-16.q665
- 6497ISACA.CISA-KR.v2026-03-07.q651
- 5649ISACA.CISA-KR.v2025-04-03.q628
- 4706ISACA.CISA-KR.v2025-04-02.q544
- 5241ISACA.CISA-KR.v2025-03-31.q534
- 6619ISACA.CISA-KR.v2025-03-28.q617
- 4243ISACA.CISA-KR.v2025-03-19.q581
- 5383ISACA.CISA-KR.v2025-03-03.q807
- 5957ISACA.CISA-KR.v2024-02-07.q421
- 3589ISACA.CISA-KR.v2024-01-31.q392
- 5909ISACA.CISA-KR.v2023-10-24.q329
- 5698ISACA.CISA-KR.v2023-07-31.q266
- 3756ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 122Microsoft.AB-210.v2026-10-14.q58
- 120Huawei.H12-893_V1.0.v2026-10-14.q46
- 133UiPath.UiPath-ADPv1.v2026-10-14.q114
- 133Salesforce.MCE-Dev-201.v2026-10-14.q64
- 121PMI.PMI-RMP.v2026-10-14.q125
- 171HP.HPE7-A01.v2026-10-13.q163
- 134PaloAltoNetworks.XDR-Analyst.v2026-10-13.q30
- 145Snowflake.DAA-C01.v2026-10-13.q66
- 151Salesforce.Salesforce-Loyalty-Management.v2026-10-13.q71
- 141Oracle.1z0-1033-25.v2026-10-13.q44
[×]
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-04-07.q633 모의시험 시험자료를 다운 받으세요.