무료 온라인 액세스 ISACA.CISA-KR.v2026-05-16.q709 모의 시험 (Page 143)

CISA-KR 문제 706

다음 중 무단 로그인 방지에 가장 확실한 방법은 무엇입니까?

A. 인증 토큰 발급

B. 현행 보안 정책 강화

C. 근무 시간 외 사용 제한

D. 자동 비밀번호 생성기 설치

CISA-KR 문제 707

다음 중 정보 보안 관리 시스템의 주요 목적은 무엇입니까?

A. 정보 보안 사고의 근본 원인을 파악하고 제거하기 위해

B. 정보 보안 사고 모니터링에 사용되는 보고서의 효과를 높이기 위해

C. 정보 보안 정책 및 절차를 최신 상태로 유지하기 위해

D. 정보 보안 사고의 빈도와 영향을 줄이기 위해

CISA-KR 문제 708

다음 중 대형 금융기관의 지속적 감사에 가장 적합한 프로세스는 무엇일까요?

A. 재해 복구 시스템에서 암호화 표준 테스트

B. 실시간 데이터 시스템에 대한 접근 제어 유효성 검사

C. 시스템 간 병렬 테스트 수행

D. 헬프데스크 지표 성능 검증

정답: B

The best process for continuous auditing for a large financial institution is validating access controls for real- time data systems. This is because access controls are critical for ensuring the confidentiality, integrity, and availability of the financial data that is processed and transmitted by the real-time data systems. Real-time data systems are systems that provide timely and accurate information to support decision-making and transactions in a dynamic and complex environment. Examples of real-time data systems in the financial sector include payment systems, trading platforms, risk management systems, and fraud detection systems.
Continuous auditing of access controls can help detect and prevent unauthorized access, data leakage, data manipulation, or data loss that could compromise the security, reliability, or compliance of the real-time data systems.
Testing encryption standards on the disaster recovery system is not the best process for continuous auditing for a large financial institution. Encryption standards are important for protecting the data stored or transmitted by the disaster recovery system, which is a system that provides backup and recovery capabilities in case of a disruption or disaster. However, testing encryption standards is not a continuous process, but rather a periodic or event-driven process that can be performed as part of the disaster recovery plan testing or validation.
Performing parallel testing between systems is not the best process for continuous auditing for a large financial institution. Parallel testing is a process of comparing the results of two or more systems that perform the same function or task, such as a new system and an old system, or a primary system and a backup system.
Parallel testing can help verify the accuracy, consistency, and compatibility of the systems. However, parallel testing is not a continuous process, but rather a temporary or transitional process that can be performed as part of the system implementation or migration.
Validating performance of help desk metrics is not the best process for continuous auditing for a large financial institution. Help desk metrics are indicators that measure the efficiency, effectiveness, and quality of the help desk service, which is a service that provides technical support and assistance to the users of information systems and technology. Help desk metrics can include metrics such as response time, resolution time, customer satisfaction, and service level agreement (SLA) compliance. Validating performance of help desk metrics can help evaluate and improve the help desk service. However, validating performance of help desk metrics is not a continuous auditing process, but rather a continuous monitoring process that can be performed by the help desk management or quality assurance team.
References:
All eyes on: Continuous auditing - KPMG Global 1
Internal audit's role at financial institutions: PwC 2
The Fed - Supervisory Policy and Guidance Topics - Large Banking ... 3
Continuous Audit: Definition, Steps, Advantages and Disadvantages 4

CISA-KR 문제 709

다음 중 정보 시스템 감사자가 통제 설계 및 구현을 검토할 때 가장 중요하게 파악해야 할 사항은 무엇입니까?

A. 빈번하고 엄격한 통제 모니터링을 위한 충분한 자원이 확보되어 있는지 여부

B. 위험의 규모와 시행된 통제 조치 사이에 적절한 균형이 있는지 여부

C. 식별된 위험이 적절한 통제 메커니즘 적용을 통해 완전히 완화되고 있는지 여부

D. 시행된 통제 조치가 국내 및 국제 산업 모범 사례와 긴밀하게 일치하는지 여부

다른 버전: 1742ISACA.CISA-KR.v2026-05-06.q261; 3090ISACA.CISA-KR.v2026-03-16.q665; 4440ISACA.CISA-KR.v2026-03-07.q651; 9176ISACA.CISA-KR.v2025-04-07.q633; 4431ISACA.CISA-KR.v2025-04-03.q628; 3633ISACA.CISA-KR.v2025-04-02.q544; 4189ISACA.CISA-KR.v2025-03-31.q534; 5297ISACA.CISA-KR.v2025-03-28.q617; 3067ISACA.CISA-KR.v2025-03-19.q581; 3953ISACA.CISA-KR.v2025-03-03.q807; 5040ISACA.CISA-KR.v2024-02-07.q421; 2789ISACA.CISA-KR.v2024-01-31.q392; 5259ISACA.CISA-KR.v2023-10-24.q329; 5158ISACA.CISA-KR.v2023-07-31.q266; 3089ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 216Microsoft.PL-600.v2026-08-11.q206; 153Microsoft.DP-100.v2026-08-11.q160; 155Oracle.1Z0-1048-25.v2026-08-11.q68; 130ISQI.CTAL-TAE.v2026-08-11.q37; 171ServiceNow.CIS-HR.v2026-08-11.q84; 254Salesforce.Plat-Arch-201.v2026-08-10.q101; 240Databricks.Databricks-Machine-Learning-Professional.v2026-08-10.q76; 189F5.F5CAB2.v2026-08-10.q41; 284APA.CPP-Remote.v2026-08-08.q109; 149SAP.C_BCBAI_2601.v2026-08-08.q9