무료 온라인 액세스 ISACA.CISA-KR.v2026-03-16.q665 모의 시험 (Page 69)

CISA-KR 문제 336

취약한 웹사이트의 검색창에 악성코드를 입력하여 서버가 제한된 정보를 공개하도록 하는 시스템 공격 방법은 다음 중 어느 것인가?

A. 남자-중간자

B. 서비스 거부(DoS)

C. SQL 주입

D. 크로스 사이트 스크립팅

CISA-KR 문제 337

다음 중 조직의 정보에 액세스할 수 없도록 하기 위해 재사용을 위해 하드 디스크를 삭제하는 가장 좋은 방법은 무엇입니까?

A. 재분할

B. 소자

C. 서식 지정

D. 데이터 삭제

정답: D

The best way to sanitize a hard disk for reuse to ensure the organization's information cannot be accessed is data wiping. Data wiping is a process that overwrites the data on the hard disk with random or meaningless patterns, making it unrecoverable by any software or hardware methods. Data wiping can provide a high level of security and assurance that the organization's information is permanently erased from the hard disk, and that it cannot be accessed by unauthorized parties or malicious actors.
Re-partitioning is not a way to sanitize a hard disk for reuse, but rather a way to organize the hard disk into different logical sections or volumes. Re-partitioning does not erase the data on the hard disk, but only changes the structure and allocation of the disk space. Re-partitioning may make the data inaccessible to the operating system, but not to other tools or methods that can scan or recover the data from the disk sectors.
Degaussing is a way to sanitize a hard disk for reuse, but only for magnetic hard disks, not solid state drives (SSDs). Degaussing is a process that exposes the hard disk to a strong magnetic field, which disrupts and destroys the magnetic alignment of the data on the disk platters. Degaussing can effectively erase the data on magnetic hard disks, but it can also damage or render unusable the electronic components of the hard disk, such as the read/write heads or circuit boards. Degaussing also does not work on SSDs, which store data using flash memory cells, not magnetic media.
Formatting is not a way to sanitize a hard disk for reuse, but rather a way to prepare the hard disk for use by an operating system. Formatting is a process that creates a file system on the hard disk, which defines how the data is stored and accessed on the disk. Formatting does not erase the dataon the hard disk, but only deletes the file system metadata and marks the disk space as available for new data. Formatting may make the data invisible to the operating system, but not to other tools or methods that can restore or recover the data from the disk sectors.
References:
How to Wipe A Hard Drive for Reuse? Check the Quickest Way to Wipe A Hard Drive - EaseUS 1 HP PCs - Using Secure Erase or HP Disk Sanitizer 2 HOW to QUICKLY and PERMANENTLY SANITIZE ANY DRIVE (SSD, USB thumb drive ...)

CISA-KR 문제 338

데이터 센터 환경 관리 검토의 일환으로 화재 진압 시스템을 검토할 때 다음 중 어떤 사항을 고려해야 합니까?

A. 설치 설명서

B. 현장 교체 가능

C. 보험 적용 범위

D. 유지 관리 절차

CISA-KR 문제 339

정보 처리 환경을 검토하는 IS 감사자는 외부 침투 테스트를 수행하기로 결정합니다. 다음 중 조직이 감사자의 침투 공격과 실제 공격을 구별하기 위해 감사 범위에 포함시키는 것이 가장 적절한 것은 무엇입니까?

A. 시뮬레이션된 공격 타이밍

B. 시뮬레이션된 공격의 제한된 호스트 IP 주소

C. 시뮬레이션된 공격의 테스트 기술

D. 시뮬레이션된 공격의 소스 IP 주소

CISA-KR 문제 340

다음 중 공유 프린터에서 인쇄된 기밀 문서가 공개되는 것을 방지하는 방법은 무엇입니까?

A. 암호를 사용하여 권한이 있는 사용자가 프린터로 문서를 보낼 수 있도록 허용

B. 인쇄본을 제작하려면 프린터에 키 코드를 입력해야 함

C. 사용자의 컴퓨터와 프린터 사이의 데이터 스트림을 암호화합니다.

D. 인쇄문서에 대한 분류수준을 담은 헤더페이지 제작

정답: B

Requiring a key code to be entered on the printer to produce hard copy is a method to prevent disclosure of classified documents printed on a shared printer. This is because requiring a key code adds an extra layer of security and authentication to the printing process, ensuring that only authorized users can access and retrieve the printed documents. Requiring a key code also prevents unauthorized users from viewingor tampering with the documents while they are in the printer's queue or output tray1.
Using passwords to allow authorized users to send documents to the printer is not a sufficient method to prevent disclosure of classified documents printed on a shared printer. This is because passwords only protect the transmission of the documents from the user's computer to the printer, but they do not protect the documents once they are printed. Passwords can also be compromised or forgotten by users, making them vulnerable to unauthorized access or denial of service2.
Encrypting the data stream between the user's computer and the printer is not a sufficient method to prevent disclosure of classified documents printed on a shared printer. This is because encryption only protects the confidentiality and integrity of the documents while they are in transit, but they do not protect the documents once they are printed. Encryption can also introduce performance issues or compatibility problems with different printers or devices2.
Producing a header page with classification level for printed documents is not a method to prevent disclosure of classified documents printed on a shared printer. This is because producing a header page only informs the users about the sensitivity and handling of the documents, but it does not prevent unauthorized users from accessing or viewing them. Producing a header page can also waste paper and ink, as well asincrease the risk of misplacing or mixing up the documents

다른 버전: 266ISACA.CISA-KR.v2026-08-15.q712; 4298ISACA.CISA-KR.v2026-05-16.q709; 1856ISACA.CISA-KR.v2026-05-06.q261; 4723ISACA.CISA-KR.v2026-03-07.q651; 9431ISACA.CISA-KR.v2025-04-07.q633; 4541ISACA.CISA-KR.v2025-04-03.q628; 3804ISACA.CISA-KR.v2025-04-02.q544; 4309ISACA.CISA-KR.v2025-03-31.q534; 5505ISACA.CISA-KR.v2025-03-28.q617; 3303ISACA.CISA-KR.v2025-03-19.q581; 4186ISACA.CISA-KR.v2025-03-03.q807; 5242ISACA.CISA-KR.v2024-02-07.q421; 2918ISACA.CISA-KR.v2024-01-31.q392; 5427ISACA.CISA-KR.v2023-10-24.q329; 5255ISACA.CISA-KR.v2023-07-31.q266; 3254ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 266ISACA.CISA-KR.v2026-08-15.q712; 229Microsoft.MS-700-KR.v2026-08-15.q203; 158Microsoft.AZ-305-KR.v2026-08-14.q177; 229Microsoft.DP-900-KR.v2026-08-13.q130; 297Microsoft.PL-600.v2026-08-11.q206; 238Microsoft.DP-100.v2026-08-11.q160; 196Oracle.1Z0-1048-25.v2026-08-11.q68; 165ISQI.CTAL-TAE.v2026-08-11.q37; 206ServiceNow.CIS-HR.v2026-08-11.q84; 286Salesforce.Plat-Arch-201.v2026-08-10.q101