CISA Disaster Recovery Testing 4

Question 1

A company's DR test reveals that the recovery site network bandwidth is insufficient for peak transaction volumes. This finding MOST likely indicates a gap in:

Accepted Answer

Capacity planning for the recovery environment

Answer

Insufficient bandwidth at the recovery site is a capacity planning failure; the recovery environment must be sized to handle actual production workloads.

Question 2

Which party should APPROVE the final DR test plan before testing begins?

Accepted Answer

Senior management or the steering committee

Answer

Senior management or the steering committee must approve DR test plans to ensure organizational alignment, resource commitment, and accountability.

Question 3

During a DR test, the team successfully restores data but discovers the restored database is missing two hours of transactions. Which control failure does this MOST directly indicate?

Accepted Answer

Replication or backup frequency not meeting the RPO

Answer

Missing two hours of transactions means the backup or replication interval was too long, causing the RPO to be exceeded.

Question 4

An IS auditor notes that DR tests are only conducted by the IT department without business unit participation. The GREATEST risk of this approach is:

Accepted Answer

Failure to validate recovery of business processes, not just technical systems

Answer

Without business unit involvement, DR tests may confirm technical recovery but miss whether business processes, workflows, and outputs are actually restored correctly.

Question 5

Which of the following is the BEST evidence that a DR test was successful from an IS audit perspective?

Accepted Answer

Recovery objectives were met and results were documented and signed off by management

Answer

Documented results showing that RTOs and RPOs were achieved, with formal management sign-off, provide the most auditable evidence of test success.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Disaster Recovery Testing 4