Isaca CISA Quiz 42 Topic 7 Questions 206-210

Question: 1

The use of which of the following would BEST enhance a process improvement program?

ACapability maturity models

BModel-based design notations

CProject management methodologies

DBalanced scorecard

Show Answer

Question: 2

IT disaster recovery lime objectives (RTOs) should be based on the:

Amaximum tolerable loss of data.

Bbusiness-defined critically of the systems.

Cmaximum tolerable downtime (MTD).

Dnature of the outage.

Show Answer

Question: 3

During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not been performed The auditor should FIRST.

Aevaluate the impact on current disaster recovery capability.

Bissue an intermediate report to management

Cconduct additional compliance testing

Dperform business impact analysis

Show Answer

Question: 4

An organization is planning to re-purpose workstations mat were used to handle confidential information. Which of the following would be the IS auditor's BEST recommendation to dispose of this information?

AOverwrite the disks with random data

BErase the disks by degaussing.

CDelete the disk partitions.

DReformat the disks.

Show Answer

Question: 5

Critical processes are not defined in an organization's business continuity plan (BCP). Which of the following would have MOST likely identified this gap?

AUpdating the risk register

BTesting the incident response plan

CReviewing the business impact analysis (BIA)

DReviewing the business continuity strategy

Show Answer

Isaca CISA Quiz:42 Topic:7 Questions:206-210