ISACA Information Systems Operations and Business Resilience 2

Question 1

Which metric best measures the effectiveness of an organization's disaster recovery plan?

Accepted Answer

Recovery Time Objective (RTO) achieved

Answer

Achieving the defined RTO demonstrates that the DR plan can restore operations within the acceptable downtime window.

Question 2

An IS auditor reviewing an organization's job scheduling process should be MOST concerned if:

Accepted Answer

Operators can modify production job schedules without change management approval

Answer

Unauthorized modification of production job schedules bypasses change management controls and can lead to data integrity issues or unauthorized processing.

Question 3

What is the PRIMARY purpose of a business impact analysis (BIA)?

Accepted Answer

Identify critical business functions and their recovery priorities

Answer

A BIA identifies critical business processes, their dependencies, and the impact of disruption to establish recovery priorities and objectives.

Question 4

During a data center audit, an IS auditor finds that system logs are stored on the same server being monitored. The MAIN risk is:

Accepted Answer

An attacker could alter logs to conceal unauthorized activity

Answer

Storing logs on the monitored system allows an attacker who compromises that system to modify or delete audit trails, eliminating evidence of their actions.

Question 5

Which of the following is the BEST indicator that patch management processes are effective?

Accepted Answer

Mean time to patch critical vulnerabilities meets defined SLAs

Answer

Measuring mean time to patch against defined SLAs provides a quantifiable indication of whether vulnerabilities are being remediated in a timely manner.

(ISACA) Information Systems Audit and Control Association Certification Practice Test

(ISACA) Information Systems Audit and Control Association Certification Practice Test

ISACA Information Systems Operations and Business Resilience 2