ISACA Information Systems Operations and Business Resilience 3 â Questions and Answers
Question 1: An organization replicates data to a remote site every four hours. This interval represents the:
- Recovery Point Objective (RPO) (Correct answer)
- Recovery Time Objective (RTO)
- Maximum Tolerable Downtime (MTD)
- Mean Time Between Failures (MTBF)
Correct answer: Recovery Point Objective (RPO)
The replication interval defines the maximum data loss the organization can tolerate, which is the definition of the Recovery Point Objective.
Question 2: Which type of system redundancy eliminates a single point of failure at the power supply level?
- Dual power feeds from separate utility substations (Correct answer)
- Uninterruptible Power Supply (UPS) with battery backup
- Redundant Array of Independent Disks (RAID)
- Clustering of application servers
Correct answer: Dual power feeds from separate utility substations
Dual feeds from separate substations ensure that a failure at one substation does not interrupt power, unlike a UPS which only bridges a temporary outage.
Question 3: An IS auditor is reviewing capacity management practices. Which finding represents the GREATEST risk?
- No formal process exists to forecast resource utilization trends (Correct answer)
- Capacity reports are generated monthly rather than weekly
- Storage arrays are currently at 65% utilization
- Capacity planning is performed by the IT operations team
Correct answer: No formal process exists to forecast resource utilization trends
Without trend forecasting, the organization cannot proactively address capacity constraints, increasing the risk of performance degradation or outages.
Question 4: Which control BEST ensures the completeness of batch processing runs?
- Reconciling record counts and control totals before and after processing (Correct answer)
- Encrypting batch input files at rest
- Scheduling batch jobs during maintenance windows
- Using a dedicated batch processing server
Correct answer: Reconciling record counts and control totals before and after processing
Control totals and record counts provide a mathematical verification that all input records were processed and no records were added, dropped, or duplicated.
Question 5: A crisis communication plan should PRIMARILY ensure that:
- Accurate and timely information reaches stakeholders during an incident (Correct answer)
- Marketing materials are updated after a disaster
- Only senior executives communicate with the media
- All communications are encrypted
Correct answer: Accurate and timely information reaches stakeholders during an incident
The primary goal of crisis communication is to provide stakeholdersâincluding employees, customers, and regulatorsâwith accurate and timely information to manage the situation effectively.
Question 6: When auditing an organization's network operations center (NOC), an IS auditor should FIRST determine whether:
- Monitoring tools provide real-time alerts for threshold breaches (Correct answer)
- The NOC is staffed 24/7
- Network diagrams are printed and posted on the wall
- All alerts are logged to email
Correct answer: Monitoring tools provide real-time alerts for threshold breaches
Real-time alerting on threshold breaches is the foundational control that enables the NOC to detect and respond to incidents promptly.
Question 7: Which backup strategy provides the FASTEST recovery time while minimizing backup storage requirements?
- A combination of full and incremental backups with a recovery catalog (Correct answer)
- Daily full backups of all data
- Incremental-only backups stored indefinitely
- Differential backups taken every hour
Correct answer: A combination of full and incremental backups with a recovery catalog
A full backup combined with incremental backups and a recovery catalog balances storage efficiency with manageable restore complexity when guided by the catalog.
ISACA Information Systems Operations and Business Resilience 3
An organization replicates data to a remote site every four hours.
This interval represents the: