CISA Trivia 4

Question 1

What is the purpose of a business impact analysis (BIA) in the context of IT auditing?

Accepted Answer

Identify critical systems and the financial impact of their disruption

Answer

A BIA identifies critical business functions and quantifies the financial and operational impact of disruptions to guide recovery planning.

Question 2

Which recovery metric defines the maximum tolerable period of data loss after a disruption?

Accepted Answer

Recovery Point Objective (RPO)

Answer

RPO defines the maximum age of data that must be recovered from backup for normal operations to resume.

Question 3

In a hot site disaster recovery arrangement, the alternate facility is characterized by:

Accepted Answer

Fully operational hardware, software, and data ready for immediate failover

Answer

A hot site is a fully equipped, mirror facility that can take over operations immediately after a disaster.

Question 4

What does 'chain of custody' refer to in IS auditing and digital forensics?

Accepted Answer

The documented trail showing who handled evidence and when

Answer

Chain of custody documents the chronological handling of evidence to ensure its integrity and admissibility.

Question 5

Which type of access control model assigns permissions based on a user's role within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants access based on predefined roles, simplifying administration and supporting least privilege.

CISA - Certified Information Systems Auditor Practice Test