CISA Disaster Recovery Testing 2

Question 1

Which type of DR test involves actually switching operations to the recovery site and running production workloads from it?

Accepted Answer

Full interruption test

Answer

Tabletop exercise

Answer

Parallel test

Answer

Structured walkthrough

Question 2

An IS auditor reviewing DR test results notes that the RTO was met but several critical transactions were lost. Which metric was NOT achieved?

Accepted Answer

Recovery Point Objective

Answer

Recovery Time Objective

Answer

Maximum Tolerable Downtime

Answer

Mean Time to Repair

Question 3

During a DR tabletop exercise, the team discovers the backup media restoration procedure references a tool no longer installed on recovery servers. This finding BEST illustrates the importance of:

Accepted Answer

Keeping DR documentation current with production changes

Answer

Offsite media rotation schedules

Answer

Encrypting backup media

Answer

Testing during off-peak hours

Question 4

Which DR test approach allows both the primary and recovery sites to process transactions simultaneously to compare output accuracy?

Accepted Answer

Parallel test

Answer

Full interruption test

Answer

Checklist review

Answer

Simulation test

Question 5

When scheduling DR tests, the MOST important factor an IS auditor should verify is that tests are:

Accepted Answer

Approved by senior management and aligned with business risk

Answer

Conducted only during weekends to minimize impact

Answer

Limited to IT staff to avoid business disruption

Answer

Performed at least once every five years

Question 6

After a successful DR test, which action is MOST critical before closing out the test?

Accepted Answer

Returning all systems to the primary site and verifying normal operations

Answer

Archiving all test logs for ten years

Answer

Publishing the test results on the company intranet

Answer

Ordering new backup hardware

Question 7

An organization conducts a DR simulation where team members respond to a hypothetical scenario without touching live systems. This is BEST described as a:

Accepted Answer

Tabletop exercise

Answer

Full interruption test

Answer

Parallel test

Answer

Technical recovery test