Isaca CISA Quiz 127 Topic 9 Questions 631-635

Question: 1

A hot site should be implemented as a recovery strategy when the:

Adisaster tolerance is low.

Brecovery point objective (RPO) is high.

Crecovery time objective (RTO) is high.

Ddisaster tolerance is high.

Show Answer

Question: 2

An organization has implemented a disaster recovery plan. Which of the following steps should be carried out next?

AObtain senior management sponsorship.

BIdentify business needs.

CConduct a paper test.

DPerform a system restore test.

Show Answer

Question: 3

When auditing a disaster recovery plan for a critical business area, an IS auditor finds that it does not cover all the systems. Which of the following is the MOST appropriate action for the IS auditor?

AAlert management and evaluate the impact of not covering all systems.

BCancel the audit.

CComplete the audit of the systems covered by the existing disaster recovery plan.

DPostpone the audit until the systems are added to the disaster recovery plan.

Show Answer

Question: 4

Which of the following should be of MOST concern to an IS auditor reviewing the BCP?

AThe disaster levels are based on scopes of damaged functions, but not on duration.

BThe difference between low-level disaster and software incidents is not clear.

CThe overall BCP is documented, but detailed recovery steps are not specified.

DThe responsibility for declaring a disaster is not identified.

Show Answer

Question: 5

Of the following alternatives, the FIRST approach to developing a disaster recovery strategy would be to assess whether:

Aall threats can be completely removed.

Ba cost-effective, built-in resilience can be implemented.

Cthe recovery time objective can be optimized.

Dthe cost of recovery can be minimized.

Show Answer

Isaca CISA Quiz:127 Topic:9 Questions:631-635