CISA Disaster Recovery Testing 2

Question 1

Which type of DR test involves actually switching operations to the recovery site and running production workloads from it?

Accepted Answer

Full interruption test

Answer

A full interruption test shuts down the primary site and moves all production operations to the recovery site, making it the most realistic but highest-risk test type.

Question 2

An IS auditor reviewing DR test results notes that the RTO was met but several critical transactions were lost. Which metric was NOT achieved?

Accepted Answer

Recovery Point Objective

Answer

RPO defines the maximum acceptable data loss measured in time; lost transactions indicate the RPO was not met even though the system came back within the RTO.

Question 3

During a DR tabletop exercise, the team discovers the backup media restoration procedure references a tool no longer installed on recovery servers. This finding BEST illustrates the importance of:

Accepted Answer

Keeping DR documentation current with production changes

Answer

The gap between documented procedures and the actual recovery environment shows that DR documentation must be updated whenever production systems change.

Question 4

Which DR test approach allows both the primary and recovery sites to process transactions simultaneously to compare output accuracy?

Accepted Answer

Parallel test

Answer

A parallel test runs the recovery site alongside the primary site so outputs can be compared without interrupting live operations.

Question 5

When scheduling DR tests, the MOST important factor an IS auditor should verify is that tests are:

Accepted Answer

Approved by senior management and aligned with business risk

Answer

DR tests should have management approval and be scheduled based on business risk tolerance, criticality of systems, and regulatory requirements.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Disaster Recovery Testing 2