CISA - Certified Information Systems Auditor Disaster Recovery Testing Questions and Answers

Question 1

An organization performs a disaster recovery test in which the alternate processing site is brought online and used to process non-critical transactions.
Meanwhile, the primary site continues to handle the full production workload.
Which type of disaster recovery test does this scenario describe?

Accepted Answer

Parallel test

Answer

Simulation test

Answer

Full interruption test

Answer

Walkthrough test

Question 2

An IS auditor is reviewing the results of a recent disaster recovery test. The test report shows that while all systems were recovered, the time taken exceeded the Recovery Time Objective (RTO) by several hours. Which of the following is the MOST important recommendation for the auditor to make?

Accepted Answer

Perform a root cause analysis of the delays and revise recovery procedures.

Answer

Schedule more frequent disaster recovery tests.

Answer

Update the disaster recovery plan to reflect the actual recovery time.

Answer

Increase the IT budget for more advanced recovery technologies.

Question 3

Which of the following provides the GREATEST assurance that a disaster recovery plan (DRP) will function as intended when required?

Accepted Answer

A full interruption test conducted at the alternate site.

Answer

A recent review and sign-off by senior management.

Answer

A comprehensive tabletop exercise with all key personnel.

Answer

The use of a hot site with mirrored data.

Question 4

An IS auditor notes that a company's disaster recovery plan has not been tested since a major cloud migration project was completed one year ago. The PRIMARY risk associated with this finding is that the:

Accepted Answer

DRP may not be aligned with the current technology infrastructure.

Answer

employees may be unaware of their roles and responsibilities.

Answer

cost of a future test will be significantly higher.

Answer

organization may be out of compliance with industry regulations.

Question 5

An organization is planning its annual disaster recovery testing strategy. Management is concerned about the high cost and potential business disruption of a full interruption test. Which type of test would be the BEST alternative to validate the technical recovery procedures with high assurance but minimal production impact?

Accepted Answer

A parallel test

Answer

A walkthrough test

Answer

A simulation test

Answer

A checklist review

Question 6

During a review of disaster recovery test documentation, an IS auditor's PRIMARY objective is to verify that:

Accepted Answer

the test results were analyzed and the DRP was updated with lessons learned.

Answer

all members of the recovery team participated in the test.

Answer

the test was completed within the allocated budget.

Answer

senior management was present to observe the test execution.