CISA Disaster Recovery Testing 5

Question 1

An organization's DR plan calls for restoring systems from tape, but the most recent tape is three days old. The BEST control to address this gap is:

Accepted Answer

Implementing real-time or near-real-time replication to the recovery site

Answer

Real-time or near-real-time replication eliminates the data-age problem by continuously mirroring production data to the recovery site.

Question 2

Which of the following BEST describes a structured walkthrough in the context of DR testing?

Accepted Answer

A review where team members individually verify their portions of the DR plan for accuracy

Answer

A structured walkthrough has each team member review their section of the DR plan and confirm it is accurate and feasible, without activating any systems.

Question 3

An IS auditor is evaluating DR test documentation. Which finding would be MOST concerning?

Accepted Answer

Test results are undated and lack signatures from responsible parties

Answer

Undated and unsigned test records lack the basic governance controls needed to demonstrate accountability and cannot serve as reliable audit evidence.

Question 4

Which of the following scenarios would MOST likely require an immediate, unplanned update to the DR plan?

Accepted Answer

A major application is migrated to a new cloud platform

Answer

Migrating a critical application to a new platform fundamentally changes recovery dependencies, procedures, and RTO/RPO assumptions, requiring immediate DR plan updates.

Question 5

During a DR test, a member of the recovery team cannot locate the call tree and is unable to notify key stakeholders. This BEST highlights a gap in:

Accepted Answer

DR plan accessibility and communication procedures

Answer

Recovery team members must be able to access communication tools and call trees immediately; failure to do so indicates the plan is not accessible or communication procedures are inadequate.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Disaster Recovery Testing 5