무료 온라인 액세스 ISACA.CISA-KR.v2026-05-16.q709 모의 시험 (Page 60)

CISA-KR 문제 291

다음 테스트 방법 중 변경 사항 적용 후 시스템 무결성이 유지되었는지 평가하는 데 가장 적합한 것은 무엇입니까?

A. 회귀 테스트

B. 단위 테스트

C. 통합 테스트

D. 인수 테스트

정답: A

Regression testing is the most appropriate testing method for assessing whether system integrity has been maintained after changes have been made. Regression testing is a type of software testing that ensures that previously developed and tested software still performs as expected after a change1 Regression testing helps to detectany defects or errors that may have been introduced or uncovered due to the change2 Regression testing can be performed at different levels of testing, such as unit, integration, system, and acceptance3 Unit testing is a type of software testing that verifies the functionality of individual components or units of code. Unit testing is usually performed by developers before integrating the code with other components. Unit testing helps to identify and fix errors at an early stage of development, but it does not ensure that the system as a whole works as expected after a change.
Integration testing is a type of software testing that verifies the functionality, performance, and reliability of the interactions between different components or units of code. Integration testing is usually performed after unit testing and before system testing. Integration testing helps to identify and fix errors that may occur when different components are integrated, but it does not ensure that the system as a whole works as expected after a change.
Acceptance testing is a type of software testing that verifies whether the system meets the user requirements and expectations. Acceptance testing is usually performed by end-users or customersafter system testing and before deploying the system to production. Acceptance testing helps to ensure that the system delivers the desired value and quality to the users, but it does not ensure that the system as a whole works as expected after a change.
References: 1: What is Regression Testing? Test Cases (Example) - Guru99 2: What is Regression Testing? Definition, Tools, Examples - Katalon 3: Regression testing - Wikipedia : What is Unit Testing?
Definition, Types, Tools and Examples - Guru99 : What is Integration Testing? Definition, Types, Tools and Examples - Guru99 : What is Acceptance Testing? Definition, Types, Tools and Examples - Guru99

CISA-KR 문제 292

다음 중 정보 시스템 감사자가 조직의 개인정보 보호 정책을 검토할 때 가장 중요하게 살펴봐야 할 사항은 무엇입니까?

A. 규제 기관으로부터 개인 데이터 수집에 대한 명시적인 허가를 받았는지 여부

B. 조직이 개인 정보를 수집하는 합법적인 목적

C. 제3자 서비스 제공업체와 개인 정보를 공유하는 것이 금지되어 있는지 여부

D. 조직에서 개인 데이터 보호를 위해 선택한 암호화 메커니즘

CISA-KR 문제 293

IS 감사자는 서버 사용 후 체크아웃 및 반납이 제대로 이루어지지 않아 관리자 권한이 상승된 계정이 있는 경우를 파악합니다. 다음 중 문제의 범위를 파악하는 데 가장 적합한 샘플링 기법은 무엇입니까?

A. 층화 표본 추출

B. 통계적 샘플링

C. 무작위 샘플링

D. 무작위 샘플링

CISA-KR 문제 294

감사 중에 관련된 모든 IT 팀이 IT 문제점에 대해 동의했지만, 어느 팀도 시정 조치를 책임지려 하지 않거나 해당 문제점이 자신들의 책임 영역에 속한다고 생각하지 않습니다. 다음 중 정보 시스템 감사자가 취할 수 있는 최선의 조치는 무엇일까요?

A. 문제 해결을 위해 IT 관리팀에 문의하십시오.

B. 소유자를 밝히지 않고 결과를 발표하십시오.

C. 모든 IT 팀에 공동 책임을 부여합니다.

D. 가장 적합한 팀을 결정하고 그에 따라 배정합니다.

CISA-KR 문제 295

조직의 데이터 백업 및 복구 절차를 검토할 때 가장 중요하게 고려해야 할 사항은 다음 중 무엇입니까?

A. 사업 연속성 계획(BCP)

B. 복구 시점 목표(RPO)

C. 평균 복구 시간(MTTR)

D. 평균 고장 간격 시간(MTBF)

정답: B

A recovery point objective (RPO) is the maximum acceptable amount of data loss after an unplanned data- loss incident, expressed as an amount of time. This is generally thought of as the point in time before the event at which data can be successfully recovered- that is, the time elapsed since the most recent reliable backup1. RPOs are important to consider when reviewing an organization's defined data backup and restoration procedures, because they determine how frequently the organization needs to perform backups, and how much data it can afford to lose in case of a disaster. RPOs are usually defined based on the business impact and criticality of the data, as well as the compliance and regulatory requirements. For example, a financial institution may have a very low RPO (such as a few minutes or seconds) for its transactional data, while a research institute may have a higher RPO (such as a few hours or days) for its experimental data.
The other possible options are:
A). Business continuity plan (BCP): A BCP is a document that outlines how an organization will continue to operate or resume its critical functions and processes in the event of a disruption or disaster. A BCP includes various elements, such as risk assessment, business impact analysis, recovery strategies, roles and responsibilities, communication plan, and testing and maintenance. A BCP is related to an organization's defined data backup and restoration procedures, but it is not the most important factor to consider when reviewing them. A BCP defines the recovery objectives and strategies for the entire organization, while the data backup and restoration procedures are more specific and technical in nature.
C). Mean time to restore (MTTR): MTTR is a metric that measures the average time it takes to restore a system or service after a failure or outage. MTTR is an indicator of the efficiency and effectiveness of an organization's recovery process, as well as the availability and reliability of its systems or services. MTTR is related to an organization's defined data backup and restoration procedures, but it is not the most important factor to consider when reviewing them. MTTR reflects the actual performance of the recovery process, while the data backup and restoration procedures define the expected steps and actions for the recovery process.
D). Mean time between failures (MTBF): MTBF is a metric that measures the average time between failures or outages of a system or service. MTBF is an indicator of the quality and durability of an organization's systems or services, as well as their susceptibility to failures or outages. MTBF is related to an organization's defined data backup and restoration procedures, but it is not the most important factor to consider when reviewing them. MTBF reflects the potential frequency of failures or outages, while the data backup and restoration procedures define the contingency plans for failures or outages.

프리미엄 번들

DumpTop 에서 공유하는 최신 CISA-KR 시험 덤프는 CISA-KR 시험패스를 도와드릴수 있습니다! DumpTop 은 최근 업데이트된 CISA-KR 시험자료를 제공해드립니다. DumpTop CISA-KR 덤프도 시험문제 변경에 따라 업데이트되었으며 오답도 수정되었습니다. DumpTop CISA-KR 덤프 최신버전을 공유받아보세요.

CISA-KR 덤프 프리미엄 버전 액세스

(1562 Q&As 덤프, 30%OFF할인코드: KrDump)

다른 버전: 218ISACA.CISA-KR.v2026-08-15.q712; 1823ISACA.CISA-KR.v2026-05-06.q261; 3176ISACA.CISA-KR.v2026-03-16.q665; 4589ISACA.CISA-KR.v2026-03-07.q651; 9334ISACA.CISA-KR.v2025-04-07.q633; 4487ISACA.CISA-KR.v2025-04-03.q628; 3724ISACA.CISA-KR.v2025-04-02.q544; 4263ISACA.CISA-KR.v2025-03-31.q534; 5410ISACA.CISA-KR.v2025-03-28.q617; 3252ISACA.CISA-KR.v2025-03-19.q581; 4056ISACA.CISA-KR.v2025-03-03.q807; 5218ISACA.CISA-KR.v2024-02-07.q421; 2871ISACA.CISA-KR.v2024-01-31.q392; 5388ISACA.CISA-KR.v2023-10-24.q329; 5230ISACA.CISA-KR.v2023-07-31.q266; 3229ISACA.CISA-KR.v2023-06-23.q324

최근 업로드: 218ISACA.CISA-KR.v2026-08-15.q712; 165Microsoft.MS-700-KR.v2026-08-15.q203; 129Microsoft.AZ-305-KR.v2026-08-14.q177; 188Microsoft.DP-900-KR.v2026-08-13.q130; 279Microsoft.PL-600.v2026-08-11.q206; 218Microsoft.DP-100.v2026-08-11.q160; 187Oracle.1Z0-1048-25.v2026-08-11.q68; 159ISQI.CTAL-TAE.v2026-08-11.q37; 200ServiceNow.CIS-HR.v2026-08-11.q84; 279Salesforce.Plat-Arch-201.v2026-08-10.q101