무료 온라인 액세스 ISACA.CISA-KR.v2025-04-07.q633 모의 시험 (Page 33)

CISA-KR 문제 156

정보 자산 분류의 주요 이점은 다음과 같습니다.

A. 자산 손실을 방지합니다.

B. 조직의 목표를 맞추는 데 도움이 됩니다.

C. 예산 정확성을 높이는 데 도움이 됩니다.

D. 위험 관리 결정을 내릴 수 있습니다.

CISA-KR 문제 157

운영 체제 감사 중에 기준 이미지를 얻는 주된 목적은 무엇입니까?

A. 비정형적으로 실행되는 프로세스를 식별합니다.

B. 바이러스 백신 정의를 확인하려면

C. 로컬 관리자 계정 액세스를 식별하려면

D. 운영 체제 백업의 무결성을 확인하려면

정답: A

The primary purpose of obtaining a baseline image during an operating system audit is to identify atypical running processes. A baseline image is a snapshot of the normal state and configuration of an operating system, including the processes that are expected to run on it. By comparing the current state of the operating system with the baseline image, an IS auditor can detect any deviations or anomalies that may indicate unauthorized or malicious activity, such as malware infection, privilege escalation, or data exfiltration. A baseline image can also help an IS auditor to assess the performance and efficiency of the operating system, as well as its compliance with security standards and policies.
Verifying antivirus definitions (option B) is not the primary purpose of obtaining a baseline image, although it may be a part of the baseline configuration. Antivirus definitions are the files that contain the signatures and rules for detecting and removing malware. An IS auditor may verify that the antivirus definitions are up to date and consistent across the operating system, but this does not require obtaining a baseline image.
Identifying local administrator account access (option C) is not the primary purpose of obtaining a baseline image, although it may be a part of the baseline configuration. Local administrator accounts are user accounts that have full control over the operating system and its resources. An IS auditor may identify and review the local administrator accounts to ensure that they are properly secured and authorized, but this does not require obtaining a baseline image.
Verifying the integrity of operating system backups (option D) is not the primary purpose of obtaining a baseline image, although it may be a part of the backup process. Operating system backups are copies of the operating system data and settings that can be used to restore the system in case of failure or disaster. An IS auditor may verify that the operating system backups are complete, accurate, and accessible, but this does not require obtaining a baseline image.
References: : Linux security and system hardening checklist : CISA Certification | Certified Information Systems Auditor | ISACA : CISA Certified Information Systems Auditor Study Guide, 4th Edition : CISA - Certified Information Systems Auditor Study Guide [Book]

CISA-KR 문제 158

감사 프레임워크 동안 IS 감사자는 직원들이 개인 기기를 회사 소유 컴퓨터에 연결할 수 있도록 허용합니다. 감사자는 데이터 손실을 방지하기 위한 적절한 보안 제어가 있는지 BEST 어떻게 검증할 수 있습니까?

A. 직원이 기밀 데이터를 전송하기 위해 장치를 연결한 결과를 확인하기 위해 연습을 실시합니다.

B. 데이터 손실 및 해당 모바일 기기 사용자 수용 정책의 준수 여부를 검토합니다.

C. 조직에서 데이터 유출 방지(DLP) 도구가 올바르게 구성되었는지 확인하세요.

D. 직원들이 적절한 모바일 기기 보안 인식 교육을 받았는지 확인하세요.

CISA-KR 문제 159

다음 중 데이터 센터의 물리적 보안을 평가하는 가장 효과적인 방법은 무엇입니까?

A. 데이터 센터의 카메라 영상을 검토합니다.

B. 데이터 센터 액세스 로그를 검토하세요.

C. 데이터 센터 이해관계자 인터뷰.

D. 데이터 센터 투어를 실시합니다.

CISA-KR 문제 160

구현 후 검토의 주요 초점은 다음을 확인하는 것입니다.

A. 엔터프라이즈 아키텍처(EA)를 준수했습니다.

B. 사용자 요구 사항이 충족되었습니다.

C. 수락 테스트가 제대로 실행되었습니다.

D. 사용자 액세스 제어가 적절하게 설계되었습니다.

정답: B

The primary focus of a post-implementation review is to verify that user requirements have been met. User requirements are specifications that define what users need or expect from a system or service, such as functionality, usability, reliability, etc. User requirements are usually gathered and documented at the beginning of a project, and used as a basis for designing, developing, testing, and implementing a system or service. A post-implementation review is an evaluation that assesses whether a system or service meets its objectives and delivers its expected benefits after it has been implemented. The primary focus of a post- implementation review is to verify that user requirements have been met, as this can indicate whether the system or service satisfies the user needs and expectations, provides value and quality to the users, and supports the user goals and tasks. Enterprise architecture (EA) has been complied with is a possible focus of a post-implementation review, but it is not the primary one. EA is a framework that defines how an organization's business processes, information systems, and technology infrastructure are aligned and integrated to support its vision and strategy. EA has been complied with, as this can indicate whether the system or service fits with the organization's current and future state, and follows the organization's standards and principles. Acceptance testing has been properly executed is a possible focus of a post-implementation review, but it is not the primary one. Acceptance testing is a process that verifies whether a system or service meets the user requirements and expectations before it is accepted by the users or stakeholders. Acceptance testing has been properly executed, as this can indicate whether the system or service has been tested and validated by the users or stakeholders, and whether any issues or defects have been identified and resolved.
User access controls have been adequately designed is a possible focus of a post-implementation review, but it is not the primary one. User access controls are mechanisms that ensure that only authorized users can access or use a system or service, and prevent unauthorized access or use. User access controls have been adequately designed, as this can indicate whether the system or service has appropriate security and privacy measures in place, and whether any risks or threats have been mitigated.

다른 버전: 4018ISACA.CISA-KR.v2026-05-16.q709; 1803ISACA.CISA-KR.v2026-05-06.q261; 3124ISACA.CISA-KR.v2026-03-16.q665; 4489ISACA.CISA-KR.v2026-03-07.q651; 4453ISACA.CISA-KR.v2025-04-03.q628; 3696ISACA.CISA-KR.v2025-04-02.q544; 4223ISACA.CISA-KR.v2025-03-31.q534; 5321ISACA.CISA-KR.v2025-03-28.q617; 3152ISACA.CISA-KR.v2025-03-19.q581; 3995ISACA.CISA-KR.v2025-03-03.q807; 5135ISACA.CISA-KR.v2024-02-07.q421; 2852ISACA.CISA-KR.v2024-01-31.q392; 5286ISACA.CISA-KR.v2023-10-24.q329; 5215ISACA.CISA-KR.v2023-07-31.q266; 3139ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 118Microsoft.AZ-305-KR.v2026-08-14.q177; 159Microsoft.DP-900-KR.v2026-08-13.q130; 244Microsoft.PL-600.v2026-08-11.q206; 183Microsoft.DP-100.v2026-08-11.q160; 177Oracle.1Z0-1048-25.v2026-08-11.q68; 145ISQI.CTAL-TAE.v2026-08-11.q37; 195ServiceNow.CIS-HR.v2026-08-11.q84; 259Salesforce.Plat-Arch-201.v2026-08-10.q101; 245Databricks.Databricks-Machine-Learning-Professional.v2026-08-10.q76; 192F5.F5CAB2.v2026-08-10.q41