セクション：情報システムの取得、開発、導入

Explanation
The first course of action when a data breach has occurred due to malware is to quarantine the impacted systems. This means isolating the infected systems from the rest of the network and preventing any further communication or data transfer with them. This can help contain the spread of the malware, limit the damage and exposure of sensitive data, and facilitate the investigation and remediation of the incident. Quarantining the impacted systems can also help preserve the evidence and logs that may be needed for forensic analysis or legal action.
References:
[1] provides a guide on how to respond to a data breach caused by malware and recommends quarantining the impacted systems as the first step.
[2] explains what is malware and how it can cause data breaches, and suggests quarantining the infected devices as a best practice.
[3] describes the steps involved in quarantining a system infected by malware and the benefits of doing so.

モデムとは、デジタルデータをアナログデータに変換し、再びデジタルデータに戻す装置である。

Comprehensive and Detailed Step-by-Step Explanation:
Social engineering tests are the most effective way toassess real-world security awarenessby measuring employees' ability to recognize and resist security threats.
Review the Results of Social Engineering Tests (Correct Answer - A)
Simulated phishing attacks and pretexting exercises measure actual employee behavior.
Provides actionable insights into weaknesses in security awareness.
Example:If employees frequently click on phishing emails, the awareness program is ineffective.
Evaluate Management Survey Results (Incorrect - B)
Management perception is subjective and does not reflect actual employee behavior.
Interview Employees (Incorrect - C)
Employees may provide inaccurate or rehearsed responses.
Review Security Training Quiz Results (Incorrect - D)
Tests knowledge but does not measure practical application.
References:
ISACA CISA Review Manual
NIST 800-53 (Security Awareness and Training)
ISO 27001: Security Awareness Control