데이터와 애플리케이션 무결성을 유지하기 위해 다음 작업 기능 중 어느 것이 분리되어야합니까?
정답: B
Production control and data control functions must be separated to maintain data and application integrity. Production control is responsible for managing the execution and scheduling of production jobs, such as batch processing, backups, and report generation. Data control is responsible for ensuring the accuracy and completeness of data input and output, such as verifying data sources, reconciling data files, and correcting data errors. If these functions are not separated, there is a risk of unauthorized or erroneous changes to the data or the applications that process the data.
CISSP-KR 문제 862
다음 중 보안이 조직 문화 전반에 스며들도록 조직이 수행하는 가장 중요한 활동은 무엇입니까?
정답: D
The most important activity an organization performs to ensure that security is part of the overall organization culture is to work with senior management to meet business goals. Security culture is the set of security-related norms, values, attitudes, and assumptions that are inherent in the daily operation of an organization and are reflected by the actions and behaviors of all entities and personnel within the organization. Security culture can be influenced by the tone and commitment of senior management, who can demonstrate the importance and value of security for the business success, align security with core business goals, articulate security as a core value rather than as an obligation or a burden, and foster a culture of security awareness and responsibility among employees.
