順便提一下，可以從雲存儲中下載KaoGuTi CISA考試題庫的完整版：https://drive.google.com/open?id=1sM55NgGgskX5c5u_6xmKcUNK3eH4TYZj
這幾年IT行業發展非常之迅速，那麼學IT的人也如洪水猛獸般迅速多了起來，他們為了使自己以後有所作為而不斷的努力，ISACA的CISA考試認證是IT行業必不可少的認證，許多人為想通過此認證而感到苦惱。今天我告訴大家一個好辦法，就是選擇KaoGuTi ISACA的CISA考試認證培訓資料，它可以幫助你們通過考試獲得認證，而且我們可以保證通過率100%，如果沒有通過，我們將保證退還全部購買費用，不讓你們有任何損失。
| Section | Weight | Objectives |
|---|---|---|
| Governance and Management of IT | 17% | - IT Policies and Procedures - Risk Management and Compliance - IT Governance Frameworks |
| Information Systems Acquisition, Development and Implementation | 12% | - System Development Lifecycle (SDLC) - Project Management Controls - Testing and Implementation Controls |
| Information Systems Auditing Process | 21% | - Audit Standards and Guidelines - Audit Reporting and Follow-up - Audit Planning and Execution |
| Information Systems Operations and Business Resilience | 23% | - Business Continuity and Disaster Recovery - IT Operations Management - Service Level Management |
| Protection of Information Assets | 27% | - Access Control and Identity Management - Data Protection and Security Monitoring - Information Security Governance |
CISA 認證題庫讓你順利高分甚至滿分通過 CISA 考試，短時間取得應該取得 ISACA 證照。KaoGuTi 题库网承诺，只要使用本网站的题库去参加 CISA 认证考试，我们确保你能一次通过 ISACA 的 CISA 考试，否则退还购买题库的所有费用。同时，网站会根据考试认证厂商的动态变化而及时更新，确保 CISA 题库始终是最新最全的。
問題 #540
Which of the following areas is MOST likely to be overlooked when implementing a new data classification process?
答案：D
問題 #541
Which of the following layer of an OSI model responsible for routing and forwarding of a network packets?
答案：B
解題說明：
Section: Information System Operations, Maintenance and Support
Explanation/Reference:
The network layer controls the operation of the subnet, deciding which physical path the data should take
based on network conditions, priority of service, and other factors.
For CISA exam you should know below information about OSI model:
The Open Systems Interconnection model (OSI) is a conceptual model that characterizes and standardizes
the internal functions of a communication system by partitioning it into abstraction layers. The model is a
product of the Open Systems Interconnection project at the International Organization for Standardization
(ISO), maintained by the identification ISO/IEC 7498-1.
The model groups communication functions into seven logical layers. A layer serves the layer above it and
is served by the layer below it. For example, a layer that provides error-free communications across a
network provides the path needed by applications above it, while it calls the next lower layer to send and
receive packets that make up the contents of that path. Two instances at one layer are connected by a
horizontal.OSI Model
PHYSICAL LAYER
The physical layer, the lowest layer of the OSI model, is concerned with the transmission and reception of
the unstructured raw bit stream over a physical medium. It describes the electrical/optical, mechanical, and
functional interfaces to the physical medium, and carries the signals for all of the higher layers. It provides:
Data encoding: modifies the simple digital signal pattern (1s and 0s) used by the PC to better
accommodate the characteristics of the physical medium, and to aid in bit and frame synchronization. It
determines:
What signal state represents a binary 1
How the receiving station knows when a "bit-time" starts
How the receiving station delimits a frame
DATA LINK LAYER
The data link layer provides error-free transfer of data frames from one node to another over the physical
layer, allowing layers above it to assume virtually error-free transmission over the link. To do this, the data
link layer provides:
Link establishment and termination: establishes and terminates the logical link between two nodes.
Frame traffic control: tells the transmitting node to "back-off" when no frame buffers are available.
Frame sequencing: transmits/receives frames sequentially.
Frame acknowledgment: provides/expects frame acknowledgments. Detects and recovers from errors that
occur in the physical layer by retransmitting non-acknowledged frames and handling duplicate frame
receipt.
Frame delimiting: creates and recognizes frame boundaries.
Frame error checking: checks received frames for integrity.
Media access management: determines when the node "has the right" to use the physical medium.
NETWORK LAYER
The network layer controls the operation of the subnet, deciding which physical path the data should take
based on network conditions, priority of service, and other factors. It provides:
Routing: routes frames among networks.
Subnet traffic control: routers (network layer intermediate systems) can instruct a sending station to
"throttle back" its frame transmission when the router's buffer fills up.
Frame fragmentation: if it determines that a downstream router's maximum transmission unit (MTU) size is
less than the frame size, a router can fragment a frame for transmission and re-assembly at the destination
station.
Logical-physical address mapping: translates logical addresses, or names, into physical addresses.
Subnet usage accounting: has accounting functions to keep track of frames forwarded by subnet
intermediate systems, to produce billing information.
Communications Subnet
The network layer software must build headers so that the network layer software residing in the subnet
intermediate systems can recognize them and use them to route data to the destination address.
This layer relieves the upper layers of the need to know anything about the data transmission and
intermediate switching technologies used to connect systems. It establishes, maintains and terminates
connections across the intervening communications facility (one or several intermediate systems in the
communication subnet).
In the network layer and the layers below, peer protocols exist between a node and its immediate neighbor,
but the neighbor may be a node through which data is routed, not the destination station. The source and
destination stations may be separated by many intermediate systems.
TRANSPORT LAYER
The transport layer ensures that messages are delivered error-free, in sequence, and with no losses or
duplications. It relieves the higher layer protocols from any concern with the transfer of data between them
and their peers.
The size and complexity of a transport protocol depends on the type of service it can get from the network
layer. For a reliable network layer with virtual circuit capability, a minimal transport layer is required. If the
network layer is unreliable and/or only supports datagram's, the transport protocol should include extensive
error detection and recovery.
The transport layer provides:
Message segmentation: accepts a message from the (session) layer above it, splits the message into
smaller units (if not already small enough), and passes the smaller units down to the network layer. The
transport layer at the destination station reassembles the message.
Message acknowledgment: provides reliable end-to-end message delivery with acknowledgments.
Message traffic control: tells the transmitting station to "back-off" when no message buffers are available.
Session multiplexing: multiplexes several message streams, or sessions onto one logical link and keeps
track of which messages belong to which sessions (see session layer).
Typically, the transport layer can accept relatively large messages, but there are strict message size limits
imposed by the network (or lower) layer. Consequently, the transport layer must break up the messages
into smaller units, or frames, pretending a header to each frame.
The transport layer header information must then include control information, such as message start and
message end flags, to enable the transport layer on the other end to recognize message boundaries. In
addition, if the lower layers do not maintain sequence, the transport header must contain sequence
information to enable the transport layer on the receiving end to get the pieces back together in the right
order before handing the received message up to the layer above.
End-to-end layers
Unlike the lower "subnet" layers whose protocol is between immediately adjacent nodes, the transport layer
and the layers above are true "source to destination" or end-to-end layers, and are not concerned with the
details of the underlying communications facility. Transport layer software (and software above it) on the
source station carries on a conversation with similar software on the destination station by using message
headers and control messages.
SESSION LAYER
The session layer allows session establishment between processes running on different stations. It
provides:
Session establishment, maintenance and termination: allows two application processes on different
machines to establish, use and terminate a connection, called a session.
Session support: performs the functions that allow these processes to communicate over the network,
performing security, name recognition, logging, and so on.
PRESENTATION LAYER
The presentation layer formats the data to be presented to the application layer. It can be viewed as the
translator for the network. This layer may translate data from a format used by the application layer into a
common format at the sending station, then translate the common format to a format known to the
application layer at the receiving station.
The presentation layer provides:
Character code translation: for example, ASCII to EBCDIC.
Data conversion: bit order, CR-CR/LF, integer-floating point, and so on.
Data compression: reduces the number of bits that need to be transmitted on the network.
Data encryption: encrypt data for security purposes. For example, password encryption.
APPLICATION LAYER
The application layer serves as the window for users and application processes to access network
services. This layer contains a variety of commonly needed functions:
Resource sharing and device redirection
Remote file access
Remote printer access
Inter-process communication
Network management
Directory services
Electronic messaging (such as mail)
Network virtual terminals
The following were incorrect answers:
Transport layer - The transport layer ensures that messages are delivered error-free, in sequence, and with
no losses or duplications. It relieves the higher layer protocols from any concern with the transfer of data
between them and their peers.
Data link layer - The data link layer provides error-free transfer of data frames from one node to another
over the physical layer, allowing layers above it to assume virtually error-free transmission over the link.
Physical Layer - The physical layer, the lowest layer of the OSI model, is concerned with the transmission
and reception of the unstructured raw bit stream over a physical medium. It describes the electrical/optical,
mechanical, and functional interfaces to the physical medium, and carries the signals for all of the higher
layers.
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 260
問題 #542
Which of the following findings would be of GREATEST concern when reviewing a business impact analysis (BIA)?
答案：A
問題 #543
Which of the following is MOST important for an IS auditor to consider when determining an appropriate sample size in situations where selecting the entire population is not feasible?
答案：A
問題 #544
Which of the following would BEST help lo support an auditors conclusion about the effectiveness of an implemented data classification program?
答案：B
問題 #545
......
眾所周知，CISA認證在IT認證中有很大的影響力，近年來，該認證已經成為許多成功IT公司的“進門”標準。想快速通過認證考試，可以選擇我們的ISACA CISA考古題。選擇我們KaoGuTi網站，您不僅可以通過熱門的CISA考試，而且還可以享受我們提供的一年免費更新服務。擁有ISACA CISA認證可以幫助在IT領域找工作的人獲得更好的就業機會，也將會為成功的IT事業做好鋪墊。
最新CISA題庫資訊: https://www.kaoguti.com/CISA_exam-pdf.html
從Google Drive中免費下載最新的KaoGuTi CISA PDF版考試題庫：https://drive.google.com/open?id=1sM55NgGgskX5c5u_6xmKcUNK3eH4TYZj