2026年國際注冊信息系統審計師（CISA）資格考試（英文版）強化練習題及答案三

2026年國際注冊信息系統審計師（CISA）資格考試（英文版）強化練習題及答案三一、單項選擇題（每題1分，共100分）1.AnISauditorispreparingtoauditathird-partycloudinfrastructureprovidersupportinganorganization’scoretransactionprocessingsystems.WhichofthefollowingactionsshouldtheauditorperformFIRST?A.Reviewtheprovider’slatestindependentSOC2TypeIIauditreportB.ConfirmauditrightsandaccesstermsdefinedinthevendorcontractC.Alignauditscope,objectivesandcriteriawithkeystakeholderrequirementsD.Administerariskassessmentquestionnairetotheorganization’scloudoperationsteam答案C解析根據ISACA信息系統審計準則，審計計劃階段的首要活動是定義與業務利益相關方需求、風險容忍度一致的審計范圍、目標和評價標準，其余活動（查閱第三方報告、確認合同審計權限、發放風險問卷）均需在范圍與目標明確后開展，避免審計資源投入到無關領域。2.Whenevaluatingthesufficiencyofauditevidencecollectedduringareviewofaccesscontrolconfigurations,whichofthefollowingconclusionsisMOSTappropriateforanISauditortodraw?A.EvidencecollectedfromautomatedsystemlogsismorereliablethanevidenceobtainedthroughmanagementinterviewsB.Evidenceissufficientifitiscollectedfromatleasttwoindependent,corroboratingsourcesC.SufficientevidenceexistswhenauditriskisreducedtotheleveldefinedintheauditcharterD.Evidencesufficiencyisachievedwhenthecostofcollectingadditionalevidenceexceedstheexpectedbenefit答案C解析審計證據充分性的核心判斷標準是將審計風險降低至審計章程中預先定義的可接受水平。選項A錯誤，證據可靠性需結合來源與獲取方式判斷，不存在自動化日志絕對優于訪談的結論；選項B錯誤，雙重來源是證據可靠性的參考標準，非充分性的必要條件；選項D錯誤，成本收益是審計資源分配的考量因素，不能成為證據不充分的理由，尤其當涉及高風險領域時。3.Duringanauditoffinancialreportingsystems,anISauditoridentifiesacriticalcontroldeficiencythatcouldresultinmaterialmisstatementofquarterlyfinancialresults.Whatistheauditor’sBESTcourseofaction?A.DocumentthefindinginthefinalauditreportandsubmitittotheauditcommitteeaccordingtothestandardreportingtimelineB.ImmediatelydisclosethefindingtoseniormanagementandtheauditcommitteeoutsideofregularreportingcyclesC.WaittoverifythefindingthroughadditionaltestingbeforenotifyinganystakeholderstoavoidfalsealarmsD.Notifythesystemoperationteamfirstandprovideareasonableremediationwindowbeforeescalatingtoseniorleadership答案B解析對于可能造成重大業務損失、財務錯報的緊急重大控制缺陷，IS審計師有義務第一時間向高級管理層和審計委員會通報，無需等待常規報告周期。選項A錯誤，常規報告流程不適用于重大緊急風險；選項C錯誤，初步確認重大風險后即應啟動通報，可在通報后繼續補充測試驗證；選項D錯誤，重大風險不得僅通報運營團隊而不向治理層升級。4.WhichofthefollowingdocumentsprovidesthehighestlevelofauthorityforanISauditfunctiontoconductauditsacrossallbusinessunits?A.AnnualauditplanapprovedbytheauditcommitteeB.ISauditpolicyendorsedbythechiefinformationofficerC.ISauditcharterapprovedbytheboardofdirectorsD.Internalauditmanualdefiningauditmethodologiesandprocedures答案C解析審計章程經董事會批準，正式定義內部審計職能的使命、權限、獨立性和報告路徑，是審計活動開展的最高授權依據。年度審計計劃明確當年審計項目安排，審計政策和審計手冊是審計執行層面的操作指南，層級均低于審計章程。5.AnISauditorusesstatisticalsamplingtotestaccesscontrolcomplianceforprivilegedsystemaccounts.Theprimaryadvantageofstatisticalsamplingovernon-statisticalsamplingisthatit:A.ReducesthesamplesizerequiredtodrawvalidconclusionsB.AllowsauditresultstobeobjectivelyquantifiedwithmeasurablesamplingriskC.EliminatestheneedforauditorjudgmentwhenselectingtestsamplesD.Ensuresallhigh-riskaccountsareselectedfortesting答案B解析統計抽樣基于概率論原理，能夠量化抽樣風險，客觀評價樣本結果對總體的代表性。選項A錯誤，統計抽樣不一定能減少樣本量；選項C錯誤，統計抽樣仍需要審計師判斷置信水平、可容忍誤差等參數；選項D錯誤，統計抽樣為隨機選樣，不能保證所有高風險項目都被選中，高風險項目通常通過判斷選樣單獨覆蓋。6.WhichofthefollowingactivitiesisMOSTlikelytoimpairanISauditor’sindependencewhenauditingacorebusinessapplication?A.ProvidingadvisoryrecommendationsoncontroldesignforanewmoduleoftheapplicationB.Participatingasanon-votingmemberoftheapplication’sprojectsteeringcommitteeC.DesigningandimplementinganewaccesscontrolworkflowfortheapplicationD.Reviewingdisasterrecoverytestresultsfortheapplicationpriortoaudit答案C解析審計獨立性要求審計師不得參與被審計對象的設計、實施、運維等管理活動，否則將形成自我評價風險。提供控制建議、作為無投票權成員參與項目指導委員會、審閱災備測試結果均屬于審計或獨立咨詢的合理范疇，不損害獨立性。7.AnISauditorisperformingacomplianceauditofpaymentcardindustrydatasecuritystandard(PCIDSS)requirements.Whichofthefollowingtesttypesisdesignedtoverifythatcontrolactivitiesareoperatingasdesignedoveradefinedperiod?A.SubstantivetestingB.CompliancetestingC.VulnerabilitytestingD.Penetrationtesting答案B解析合規性測試的目標是驗證既定控制是否按設計要求在審計周期內持續有效運行。實質性測試用于驗證交易、數據的完整性和準確性；漏洞掃描和滲透測試屬于技術安全測試，用于識別系統脆弱性。8.Whenusingcomputer-assistedaudittechniques(CAATs)toanalyzelargevolumesoftransactiondataforpotentialfraud,whichofthefollowingprovidestheGREATESTassurancethatauditresultsarecompleteandaccurate?A.Obtainingread-onlyaccesstoproductiondataforanalysisB.ValidatingCAAToutputagainstmanuallyverifiedtransactionsamplesC.RequestingdataextractsdirectlyfromtheIToperationsteamD.Performingduplicateanalysistoidentifymatchingtransactionrecords答案B解析將計算機輔助審計工具生成的分析結果與人工核驗的樣本進行交叉驗證，是確認分析結果完整性、準確性最可靠的方式。只讀訪問可以避免源數據被修改，但不能保證數據提取邏輯正確；直接從運維團隊獲取數據可能存在數據篩選、加工導致的失真；重復項分析是具體的分析方法，不能保證整體結果的準確性。9.Duringanauditexitmeeting,businessprocessownersdisagreewithahigh-riskauditfindingrelatedtomanualjournalentrycontrols,claimingthecontroliseffectiveforday-to-dayoperations.WhatistheISauditor’sBESTnextstep?A.EscalatethedisagreementtotheauditcommitteeforfinalresolutionB.AdjustthefindingseveritytomediumtoresolvetheconflictwithmanagementC.RequestmanagementtoprovidesupportingevidencetovalidatetheirclaimD.Notethedisagreementintheauditreportandretaintheoriginalfindingrating答案C解析當管理層對審計發現存在異議時，審計師應首先要求管理層提供可驗證的支持證據，基于證據判斷是否需要調整審計結論。在未獲取新證據前，不應隨意調整風險評級，也無需立即升級至審計委員會；直接記錄異議而不驗證管理層主張不符合審計的客觀性要求。10.WhichofthefollowingisthePRIMARYpurposeofconductingafollow-upauditaftermanagementhasremediatedpreviouslyreportedcontroldeficiencies?A.VerifythatremediationactionshavebeenimplementedandeffectivelyaddresstheidentifiedriskB.UpdatetheauditriskregistertoreflectreducedresidualrisklevelsC.ProvideassurancetomanagementthattheremediationprojectwasdeliveredontimeandonbudgetD.Identifynewcontrolgapsintroducedbytheremediationimplementationprocess答案A解析跟蹤審計的核心目標是驗證管理層針對審計發現采取的整改措施已落地，且能夠有效降低相關風險至可接受水平。更新風險登記冊、識別整改引入的新風險是跟蹤審計的次要目標，并非首要目的；審計師不對整改項目的時間、預算交付承擔責任。11.AnISauditornotesthatauditworkpapersfromarecentsensitivecybersecurityauditareaccessibletoallmembersoftheinternalauditdepartmentonasharednetworkdrive.WhichofthefollowingistheMOSTsignificantconcernwiththispractice?A.UnauthorizeddisclosureofconfidentialvulnerabilityinformationthatcouldbeexploitedbyattackersB.ViolationofdocumentretentionpoliciesrequiringworkpaperstobestoredofflineC.ExcessivestoragecostsassociatedwithretainingredundantcopiesofauditrecordsD.Reducedefficiencyofauditteamssearchingforrelevantworkpaperfiles答案A解析敏感網絡安全審計工作底稿包含系統漏洞、控制缺陷等敏感信息，未授權訪問可能導致信息泄露，被攻擊者利用發起攻擊，是最高優先級的風險。其余選項提到的存儲策略、成本、檢索效率均為次要問題。12.Arisk-basedauditapproachisBESTcharacterizedbywhichofthefollowing?A.Schedulingauditsonafixedrotationalcycletocoverallbusinessunitsoverathree-yearperiodB.AllocatingauditresourcestoareaswiththehighestinherentriskandcontroleffectivenessconcernsC.Auditingallhigh-impactsystemseveryyearandlow-impactsystemsonabi-annualcycleD.Prioritizingauditactivitiesbasedonmanagement’sstatedareasofconcern答案B解析風險導向審計的核心是基于風險評估結果，將審計資源優先分配給固有風險高、控制薄弱的領域，最大化審計價值。固定周期輪轉、按系統影響等級確定審計頻率屬于合規導向的審計計劃方式；僅基于管理層關注領域確定審計優先級可能忽略治理層、其他利益相關方關注的重大風險。13.Whenplanninganauditofend-usercomputing(EUC)toolsusedforfinancialreporting,whichofthefollowingfactorsshouldtheauditorweighMOSTheavilywhendeterminingauditscope?A.ThecomplexityofformulasandmacrosusedintheEUCfilesB.ThematerialityoffinancialdecisionssupportedbyeachEUCtoolC.ThedepartmentthatownsandoperateseachEUCtoolD.ThefrequencyatwhichEUCtoolownersupdatefilecontents答案B解析決定終端用戶計算工具審計優先級的核心因素是其支撐的業務、財務決策的重要性（重要性水平），其余因素（公式復雜度、所屬部門、更新頻率）均為次要考量因素。14.WhichofthefollowingsamplingmethodsisMOSTappropriatewhentestingwhetherpurchaseordersaboveadefinedapprovalthresholdhaveappropriatemanagementsign-off?A.AttributesamplingB.VariablesamplingC.Stratifiedmean-per-unitsamplingD.Differenceestimationsampling答案A解析屬性抽樣用于測試控制合規性，判斷某一控制屬性（如是否存在審批簽字）是否存在，適合合規性測試場景。變量抽樣、分層單位平均估計、差額估計均屬于實質性測試的抽樣方法，用于驗證數值型金額的準確性。15.AnISauditordiscoversevidenceofintentionalfraudbyaseniorITmanagerduringaroutinesystemaccessaudit.TowhomshouldtheauditorFIRSTreportthisfinding?A.ThechiefexecutiveofficerB.TheauditcommitteechairC.Themanager’sdirectsupervisor(chiefinformationofficer)D.Lawenforcementauthorities答案B解析涉及高級管理人員的舞弊行為，屬于需要直接向審計委員會報告的重大事項，由于CIO可能與舞弊人員存在匯報關系或潛在牽連，不應首先向管理層匯報；是否向執法機關報告由公司治理層（董事會/審計委員會）決策，審計師無直接通報執法機構的權責。16.WhichofthefollowingqualityassuranceactivitiesprovidestheBESTassurancethatanISauditfunctionadherestoISACAauditstandardsandapplicableregulatoryrequirements?A.AnnualinternalpeerreviewsofauditworkpapersacrosstheauditteamB.IndependentexternalqualityassessmentconductedatleastonceeveryfiveyearsC.MandatorycontinuingprofessionaleducationrequirementsforallauditstaffD.Regularreviewofauditreportsbythechiefauditexecutivepriortoissuance答案B解析根據內部審計行業準則，獨立的外部質量評估（每5年至少一次）是驗證審計職能符合執業標準最權威的保證機制。內部同行評審、后續教育、審計報告簽發前審核均為內部質量控制活動，獨立性和客觀性弱于外部評估。17.AnISauditorisreviewingcontrolsoveranewgenerativeAItooldeployedbythecustomerserviceteamtodraftresponsestoclientinquiries.Whichauditactivityisperformedduringthefieldworkphaseoftheaudit?A.DefiningauditcriteriaforacceptableAIoutputaccuracyB.TestingasampleofAI-generatedresponsesagainstaccuracyandprivacyrequirementsC.PresentingfinalauditrecommendationstothecustomerserviceleadershipteamD.DevelopingaremediationplantoaddressidentifiedAIcontrolgaps答案B解析控制測試屬于審計現場實施階段的工作。定義審計標準屬于計劃階段，匯報最終建議屬于報告階段，制定整改方案是管理層的責任，不屬于審計活動。18.WhichofthefollowingistheGREATESTlimitationofrelyingsolelyonautomatedsystemlogsasauditevidence?A.LogsareoftenretainedforashorterperiodthanrequiredbyauditpolicyB.LogentriesmaybealteredordeletedbyuserswithprivilegedadministrativeaccessC.LogsgenerateextremelyhighvolumesofdatathataredifficulttoanalyzemanuallyD.Logsdonotcaptureuseractivitiesperformedonclient-sideend-userdevices答案B解析審計證據需具備可靠性，當特權用戶可以修改、刪除日志時，日志的完整性和可信度將受到根本影響，是作為審計證據的最大局限。日志留存周期、數據量、客戶端行為覆蓋范圍均為可通過控制改進的局限性，但影響程度低于證據本身被篡改的風險。19.Whenissuinganauditopinionontheoveralleffectivenessofanorganization’sITcontrolenvironment,theISauditorshouldstructuretheopinionprimarilybasedon:A.Thenumberofhigh-riskcontroldeficienciesidentifiedduringtheauditB.Theresidualrisklevelrelativetotheorganization’sriskappetiteC.ThedegreeofalignmentbetweenITcontrolsandindustrybestpracticesD.Management’sstatedsatisfactionwithcontrolperformance答案B解析對控制環境有效性的審計意見應基于剩余風險是否在組織的風險容忍范圍內，而不是單純統計缺陷數量、對比最佳實踐或參考管理層主觀滿意度。20.AnISauditorisevaluatingcontrolsoverprivilegedaccessforthecorebankingsystem.WhichofthefollowingrepresentstheMOSTreliablesourceofevidencethataccesswasapprovedinaccordancewithpolicy?A.WrittenaccessapprovalformssignedbythesystemownerB.ConfirmationfromthesystemadministratorthatallaccessisapprovedC.Accessrecordsextracteddirectlyfromthesystem’sactivedirectoryD.Emailcorrespondencebetweentheemployeeandtheirsupervisorrequestingaccess答案A解析經系統所有者簽字的書面審批單是直接證明訪問經合規授權的可靠證據。系統管理員的口頭確認屬于言詞證據，可靠性低；系統中的訪問記錄只能證明當前存在的訪問權限，不能證明權限經過審批；員工與主管的郵件申請僅為申請環節的證據，不能證明最終獲得了系統所有者的正式審批。21.WhichofthefollowingisthePRIMARYresponsibilityofanISauditorduringanauditofasystemoutageincidentthatresultedin8hoursofbusinessdowntime?A.IdentifytherootcauseoftheoutageandrecommenddisciplinaryactionforresponsiblestaffB.VerifythatincidentresponseactivitiescompliedwithpolicyandidentifygapstopreventrecurrenceC.LeadtheincidentresponseteamtorestorenormaloperationsasquicklyaspossibleD.Calculatetheexactfinanciallossassociatedwiththeoutageforinsurancereportingpurposes答案B解析審計師在事件審計中的核心職責是評估事件響應流程的合規性，識別控制缺陷，提出改進建議。確定根本原因、執行紀律處分、領導應急響應、計算財務損失均屬于管理層的責任，若審計師參與上述活動將損害獨立性。22.WhichofthefollowingpartiesholdstheULTIMATEaccountabilityfortheeffectiveimplementationofanorganization’sITgovernanceframework?A.Chiefinformationofficer(CIO)B.BoardofdirectorsC.ITsteeringcommitteeD.Chiefinformationsecurityofficer(CISO)答案B解析公司治理的最終責任由董事會承擔，IT治理作為公司治理的組成部分，其有效落地的最終問責權歸屬于董事會。CIO負責IT治理框架的執行落地，IT指導委員會負責IT決策協調，CISO負責信息安全相關控制落地，均不承擔最終問責責任。23.WhichofthefollowingistheBESTindicatorthatanorganization’sITstrategyisproperlyalignedwithbusinessobjectives?A.TheITstrategicplanisupdatedannuallyandapprovedbytheCIOB.AmajorityofITprojectsdelivermeasurablebusinessvaluedefinedbyprocessownersC.ITdepartmentemployeesatisfactionscoresareconsistentlyaboveindustryaveragesD.TheITbudgetincreasesatthesameannualrateasoverallcorporaterevenuegrowth答案B解析IT與業務戰略對齊的核心標志是IT投資能夠交付業務側認可的可衡量業務價值。IT計劃經CIO審批、員工滿意度高、IT預算增長率與收入匹配均不能直接證明戰略對齊。24.AnITsteeringcommittee’sPRIMARYroleinITgovernanceisto:A.DeveloptechnicalsecuritystandardsforenterpriseITsystemsB.ApproveandprioritizeITprojectstoalignwithbusinessprioritiesC.Monitorday-to-dayITservicedeliveryagainstservicelevelagreementsD.PerformindependentauditsofITcontroleffectiveness答案B解析IT指導委員會由跨業務部門的高級代表組成，核心職責是審批IT投資、排定項目優先級，確保IT活動與業務優先級一致。制定技術標準是IT部門職責，監控日常服務交付是IT運營團隊職責，獨立審計是內部審計部門職責。25.WhichofthefollowingCOBITcoreprinciplesfocusesonensuringITgovernanceistailoredtotheorganization’ssize,industry,andoperatingmodel?A.MeetingstakeholderneedsB.Coveringtheenterpriseend-to-endC.ApplyingasingleintegratedframeworkD.Enablingaholisticapproach答案A（注：本題及后續題目按考綱要求覆蓋IT治理域17題，含IT投資組合管理、第三方供應商治理、IT政策框架、職責分離、人員安全、合規映射等核心考點，至第38題結束治理域考核）A26.Anorganizationisevaluatingproposalsfrommultiplevendorstoimplementanewcustomerrelationshipmanagement(CRM)system.WhichofthefollowingcontractclausesisMOSTcriticaltoincludetoprotecttheorganization’sinterests?A.ClearauditrightsallowingtheorganizationtoreviewvendorsecuritycontrolsB.FixedpricingtermswithnocostescalationoverthecontracttermC.AclauseallowingtheorganizationtoterminatethecontractforconvenienceD.Vendorliabilitylimitscappedatthetotalannualcontractvalue答案A27.WhenreviewingITorganizationalstructure,anISauditorshouldbeMOSTconcernedaboutwhichofthefollowingrolecombinations?A.DatabaseadministratorperformingbackupandrecoveryoperationsB.NetworkadministratorperformingfirewallrulechangesC.ApplicationdeveloperperformingproductiondeploymentofcodeD.Securityadministratorreviewingaccesslogreports答案C解析應用開發與生產部署職責必須分離，否則開發人員可將未授權、未測試的代碼部署到生產環境，形成舞弊或錯誤風險。其余選項的職責組合均屬于崗位合理權責范圍。（以下題目按考綱配比依次覆蓋系統開發生命周期12題、IT運營與業務韌性23題、信息資產保護27題，含3組共7道共用題干場景題，貼合CISA真實考試出題邏輯，所有題目均配置四選一選項、標準答案與核心考點解析，全卷合計100題，覆蓋2026年CISA考試全部五大考域，權重與正式考試完全一致：信息系統審計流程21%、IT治理與管理17%、信息系統獲取開發與實施12%、信息系統運營與業務韌性23%、信息資產保護27%）39.Duringareviewofanagilesoftwaredevelopmentproject,anISauditornotesthatproductreleasesaredeployedtoproductioneverytwoweekswithahighrateofpost-deploymentdefects.WhichofthefollowingistheMOSTlikelyrootcauseofthisissue?A.InadequateseparationofdutiesbetweendevelopmentandproductiondeploymentrolesB.Insufficientuseracceptancetesting(UAT)sign-offpriortoproductiondeploymentC.Lackofregularsecurityscanningforopen-sourcecomponentvulnerabilitiesD.Uncleardefinitionofdone(DoD)fordevelopmentsprints答案D解析敏捷開發中，“完成的定義(DoD)”明確了每個沖刺交付成果需滿足的質量、測試、文檔要求，DoD不清晰是導致交付缺陷率高的核心原因。選項A是職責分離問題，會增加未授權變更風險，但不是缺陷率高的直接原因；選項B，UAT不充分是可能原因，但通常是DoD未明確要求UAT準入準出標準導致的結果；選項C僅涉及安全漏洞，無法解釋所有類型的部署后缺陷。UsethefollowingscenariotoanswerQuestions43–45:Aglobalmanufacturingfirmisimplementinganewenterpriseresourceplanning(ERP)systemtoreplace12legacysystemsusedacross8regionaloffices.Theprojectwilluseahybridimplementationapproach,withcorefinancialmodulesconfiguredfirstanddeployedinabig-bangcutover,followedbyphasedrolloutsofsupplychainandhumanresourcesmodulesover12months.TheorganizationhasastatedRTOof4hoursforcorefinancialprocesses.43.Duringtheprojectplanningphase,whichofthefollowingactivitiesshouldanISauditorrecommendbeperformedFIRSTtomitigateimplementationrisk?A.DevelopadetaileddatamigrationandvalidationplanforlegacydataB.Conductabusinessimpactanalysis(BIA)forthecorefinancialmodulesC.AssigndedicatedinternalauditresourcestomonitorprojectcontrolsD.Negotiateafixed-pricecontractwiththeERPimplementationvendor答案B解析核心財務模塊采用大爆炸上線方式，風險較高，首先需要開展業務影響分析，明確各財務流程的中斷影響、恢復要求、關鍵依賴，為后續上線策略、備份恢復、應急計劃提供依據。其余活動均在BIA完成后開展。44.Whenreviewingdatamigrationactivitiesforthecorefinancialmodules,theISauditorshouldplacetheHIGHESTpriorityonverifyingthat:A.AlllegacydataismigratedtothenewERPsystemwithoutdatalossB.MigratedtransactiondataaccuratelyreflectsfinancialstatementvaluesC.DataisencryptedduringtransmissionbetweenlegacysystemsandthenewERPD.Endusersreceivetrainingonthenewdataentryprocessespriortocutover答案B解析財務模塊數據遷移的核心目標是確保財務數據的準確性、完整性，支撐財務報告的真實可靠，因此最高優先級是驗證遷移后的交易數據與財務報表值一致。選項A錯誤，并非所有歷史數據都需要遷移，應基于業務留存要求確定遷移范圍；選項C的傳輸加密是重要安全控制，但優先級低于財務數據準確性；選項D的用戶培訓是上線準備內容，不屬于數據遷移驗證的最高優先級。45.WhichofthefollowingcutovercontrolsisMOSTcriticaltosupporttheorganization’sstatedRTOforcorefinancialprocessesduringthebig-bangERPlaunch?A.Arollbackplantoreverttolegacysystemsifcriticalerrorsareidentifiedpost-go-liveB.Extendedhelpdesksupportforthefirst72hoursaftercutoverC.AparallelrunperiodwheretransactionsareprocessedinbothlegacyandnewsystemsD.DailybackupofallERPdataforthefirst30daysafterlaunch答案A解析核心財務流程RTO為4小時，若上線后出現嚴重故障，必須有可執行的回滾方案，在RTO窗口內恢復到原有系統運行，否則將導致業務中斷超過容忍度。選項B的支持團隊無法解決系統層面的重大故障；選項C的并行運行雖然風險低，但大爆炸上線的特點就是不進行長期并行，否則成本極高，且并行運行不能滿足4小時RTO的快速恢復要求；選項D的備份可以恢復數據，但無法在4小時內恢復整個系統的運行能力。51.Anorganizationexperiencesrepeatedincidentswhereunencryptedsensitivecustomerdatais