セクション：情報資産の保護
Explanation:
確かに、継続的な監査アプローチの利点の一つは、多数のトランザクションを処理するタイムシェアリング環境で使用する場合に、システムセキュリティを向上させることができる点である。

Comprehensive and Detailed Explanation:
The primary purpose of IT capacity management is to ensure that IT infrastructure can meet current and future performance requirements in a cost-effective manner.
Option A is correct because it directly relates to capacity management goals.
Option B (rapid deployment) relates more to change management.
Option C (security concerns) is outside the scope of capacity management.
Option D (reducing cost/time) may be a secondary benefit but not the primary objective.
# ISACA Reference: CISA Review Manual 27th Edition, Domain 2, section on capacity management and IT service performance.

セクション：ITのガバナンスと管理

A certificate authority (CA) is critical in a public key cryptographic system for mitigating man-in-the-middle (MITM) attacks. It ensures that public keys are authentic by issuing digital certificates, which bind a public key to an entity. The CA's role in verifying identities and providing trust anchors prevents attackers from spoofing keys.
* Strong Encryption Algorithms (Option A):Encryption ensures confidentiality but does not address spoofing risks.
* Kerberos Authentication (Option B):Useful for mutual authentication but not central to public key infrastructure (PKI).
* Registration Authority (Option C):Supports the CA but does not directly prevent MITM attacks.
Reference:ISACA CISA Review Manual, Job Practice Area 4: Protection of Information Assets.