CISA-KR 문제 436
Normalizationis the process ofstructuring log datainto a standard format for easy analysis and correlation across multiple systems.
* Normalization (Correct Answer - D)
* Ensures consistency in log file formats.
* Helps security analysts detect patterns and anomalies.
* Example:Converting log timestamps into a standardized format (UTC).
* Extraction (Incorrect - A)
* Retrieves data but does not format it for analysis.
* Data Acquisition (Incorrect - B)
* Refers to collecting data, not structuring it.
* Imaging (Incorrect - C)
* Creates copies of disk storage but is unrelated to log analysis.
References:
* ISACA CISA Review Manual
* NIST 800-92 (Guide to Computer Security Log Management)
CISA-KR 문제 437
References:
* Control Objectives & Activities: Examples, Appropriateness
* Levels and Types of Control | Principles of Management
* CISA Review Manual 27th Edition, page 337
CISA-KR 문제 438
/assurancereview is to provide management with an independent assessment relating to the effectiveness of information security management within the enterprise." The guideline also states that "the audit/assurance professional should evaluate whether there is an appropriate level of awareness throughout the enterprise regarding information security policies, standards, procedures and guidelines." According to a web search result from Microsoft Security, "Information security programs need to: ... Support the execution of decisions." 2 One of the ways to support the execution of decisions is to ensure that everyone in the organization understands their security responsibilities and follows the security policies and procedures.
CISA-KR 문제 439
439.
CISA-KR 문제 440
An information classification scheme is a framework that defines the categories and levels of sensitivity for different types of information, such as public, internal, confidential, or secret. An information classification scheme can help implement email controls by providing criteria and guidelines for identifying, labeling, handling, and protecting sensitive information in email attachments. The other options are not as important as developing an information classification scheme, as they do not address the root cause of the problem or provide the same benefits. Requiring all employees to sign nondisclosure agreements (NDAs) is a legal control that can help deter or penalize employees from disclosing sensitive information, but it does not prevent them from emailing it outside the organization. Developing an acceptable use policy for end-user computing (EUC) is a governance control that can help define and communicate the rules and expectations for using IT resources, such as email, but it does not prevent employees from emailing sensitive information outside the organization. Providing notification to employees about possible email monitoring is a transparency control that can help inform and warn employees about the potential consequences of emailing sensitive information outside the organization, but it does not prevent them from doing so. References: CISA Review Manual (Digital Version), Chapter 5, Section 5.3.2
- 다른 버전
- 243ISACA.CISA-KR.v2026-08-15.q712
- 4252ISACA.CISA-KR.v2026-05-16.q709
- 1833ISACA.CISA-KR.v2026-05-06.q261
- 3203ISACA.CISA-KR.v2026-03-16.q665
- 4692ISACA.CISA-KR.v2026-03-07.q651
- 4499ISACA.CISA-KR.v2025-04-03.q628
- 3792ISACA.CISA-KR.v2025-04-02.q544
- 4293ISACA.CISA-KR.v2025-03-31.q534
- 5446ISACA.CISA-KR.v2025-03-28.q617
- 3273ISACA.CISA-KR.v2025-03-19.q581
- 4105ISACA.CISA-KR.v2025-03-03.q807
- 5235ISACA.CISA-KR.v2024-02-07.q421
- 2904ISACA.CISA-KR.v2024-01-31.q392
- 5412ISACA.CISA-KR.v2023-10-24.q329
- 5244ISACA.CISA-KR.v2023-07-31.q266
- 3244ISACA.CISA-KR.v2023-06-23.q324
- 최근 업로드
- 243ISACA.CISA-KR.v2026-08-15.q712
- 181Microsoft.MS-700-KR.v2026-08-15.q203
- 134Microsoft.AZ-305-KR.v2026-08-14.q177
- 204Microsoft.DP-900-KR.v2026-08-13.q130
- 290Microsoft.PL-600.v2026-08-11.q206
- 226Microsoft.DP-100.v2026-08-11.q160
- 189Oracle.1Z0-1048-25.v2026-08-11.q68
- 160ISQI.CTAL-TAE.v2026-08-11.q37
- 202ServiceNow.CIS-HR.v2026-08-11.q84
- 283Salesforce.Plat-Arch-201.v2026-08-10.q101
PDF 파일 다운로드
메일 주소를 입력하시고 다운로드 하세요. ISACA.CISA-KR.v2025-04-07.q633 모의시험 시험자료를 다운 받으세요.