무료 온라인 액세스 ISACA.CISA-KR.v2026-03-16.q665 모의 시험 (Page 67)

CISA-KR 문제 326

한 금융 그룹은 최근 새로운 기술과 프로세스를 구현했습니다. 어떤 유형의 IS 감사가 부서 목표가 충족되었다는 것을 가장 높은 수준으로 보장할 수 있을까요?

A. 성과 감사

B. 통합 감사

C. 사이버 감사

D. 재무 감사

CISA-KR 문제 327

다음 네트워크 토폴로지 중에서 가장 뛰어난 장애 내구성을 제공하는 것은 무엇입니까?

A. 버스 구성

B. 메시 구성

C. 링 구성

D. 별의 구성

CISA-KR 문제 328

소프트웨어 개발의 폭포수 라이프사이클 모델은 다음 중 어떤 상황에 가장 적합할까요?

A. 보호 요구 사항이 이해되었습니다.

B. 이 프로젝트는 시간적 압박을 받고 있습니다.

C. 이 프로젝트에서는 객체 지향적 설계 방식을 적용하려고 합니다.

D. 이 프로젝트에는 새로운 기술이 사용될 예정입니다.

정답: A

The waterfall life cycle model of software development is best suited for situations where the project requirements are well understood. The waterfall life cycle model is a sequential and linear approach to software development that consists of several phases, such as planning, analysis, design, implementation, testing, and maintenance. Each phase depends on the completion and approval of the previous phase before proceeding to the next phase. The waterfall life cycle model is best suited for situations where the project requirements are well understood, as it assumes that the requirements are clear, stable, and fixed at the beginning of the project, and do not change significantly throughout the project. The project is subject to time pressures is not a situation where the waterfall life cycle model of software development is best suited, as it may not be flexible or agile enough to accommodate changes or adjustments in the project schedule or timeline. The waterfall life cycle model may involve long delays or dependencies between phases, and may not allow for early feedback or delivery of software products. The project intends to apply an object-oriented design approach is not a situation where the waterfall life cycle model of software development is best suited, as it may not be compatible or effective with the object-oriented design approach. The object-oriented design approach is a technique that models software as a collection of interacting objects that have attributes and behaviors. The object-oriented design approach may require iterative and incremental development methods that allow for dynamic and adaptive changes in software design and functionality. The project will involve the use of new technology is not a situation where the waterfall life cycle model of software development is best suited, as it may not be able to cope with the uncertainty or complexity of new technology. The waterfall life cycle model may not allow for sufficient exploration or experimentation with new technology, and may not be able to handle changes or issues that arise from new technology.

CISA-KR 문제 329

조직의 데이터 분류 프로세스를 평가할 때 IS 감사인의 주요 초점은 다음 사항에 있어야 합니다.

A. 데이터 분류가 자동화됩니다.

B. 데이터 사전이 유지됩니다.

C. 데이터 보존 요구 사항이 명확하게 정의되어 있습니다.

D. 데이터가 올바르게 분류되었습니다.

정답: D

Data classification is the process of organizing and labeling data into categories based on file type, contents, and other metadata. Data classification helps organizations answer important questions about their data that inform how they mitigate risk and manage data governance policies. Data classification also enables appropriate protection measures, and efficient search, retrieval and use of each data category12.
While evaluating the data classification process of an organization, an IS auditor's primary focus should be on whether data is correctly classified. This means that the data is assigned to the appropriate classification level based on its sensitivity, importance, integrity, availability, compliance requirements, and business value. Correct data classification ensures that the data is protected according to its risk level, and that the organization can comply with relevant laws and regulations that apply to different types of data3.
The other three options are not the primary focus of an IS auditor while evaluating the data classification process, although they may be relevant or useful for certain aspects of data management. Data classifications are automated means that the organization uses software tools or algorithms to analyze and label data based on predefined rules or criteria. This can improve the efficiency and consistency of data classification, but it does not guarantee that the data is correctly classified. The IS auditor still needs to verify the accuracy and validity of the automated classifications, and check for any errors or anomalies.
A data dictionary is maintained means that the organization keeps a record of the definitions, formats, sources, and relationships of the data elements in its systems or databases. This can enhance the understanding and usability of the data, but it does not ensure that the data is correctly classified. The IS auditor still needs to examine the content and context of the data, and compare it with the classification criteria and policies.
Data retention requirements are clearly defined means that the organization specifies how long it will keep different types of data, and when it will delete or archive them. This can help reduce storage costs, improve performance, and comply with legal obligations, but it does not ensure that the data is correctly classified. The IS auditor still needs to assess whether the data is stored and protected according to its classification level, and whether the retention periods are appropriate for each type of data.
Therefore, data is correctly classified is the best answer.
References:
* Data Classification: The Basics and a 6-Step Checklist - NetApp
* What is Data Classification? Guidelines and Process -Varonis
* Data Classification and Handling Procedures Guide

CISA-KR 문제 330

어떤 프로세스에서 회귀 테스트가 가장 일반적으로 사용됩니까?

A. 시스템 수정

B. 프로그램 개발

C. 스트레스 테스트

D. 단위 테스트

다른 버전: 266ISACA.CISA-KR.v2026-08-15.q712; 4298ISACA.CISA-KR.v2026-05-16.q709; 1855ISACA.CISA-KR.v2026-05-06.q261; 4723ISACA.CISA-KR.v2026-03-07.q651; 9431ISACA.CISA-KR.v2025-04-07.q633; 4541ISACA.CISA-KR.v2025-04-03.q628; 3804ISACA.CISA-KR.v2025-04-02.q544; 4309ISACA.CISA-KR.v2025-03-31.q534; 5505ISACA.CISA-KR.v2025-03-28.q617; 3303ISACA.CISA-KR.v2025-03-19.q581; 4186ISACA.CISA-KR.v2025-03-03.q807; 5242ISACA.CISA-KR.v2024-02-07.q421; 2918ISACA.CISA-KR.v2024-01-31.q392; 5427ISACA.CISA-KR.v2023-10-24.q329; 5255ISACA.CISA-KR.v2023-07-31.q266; 3254ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 266ISACA.CISA-KR.v2026-08-15.q712; 229Microsoft.MS-700-KR.v2026-08-15.q203; 158Microsoft.AZ-305-KR.v2026-08-14.q177; 229Microsoft.DP-900-KR.v2026-08-13.q130; 297Microsoft.PL-600.v2026-08-11.q206; 238Microsoft.DP-100.v2026-08-11.q160; 196Oracle.1Z0-1048-25.v2026-08-11.q68; 165ISQI.CTAL-TAE.v2026-08-11.q37; 206ServiceNow.CIS-HR.v2026-08-11.q84; 286Salesforce.Plat-Arch-201.v2026-08-10.q101