ISACA Information Systems Operations and Business Resilience 4

Question 1

An IS auditor reviewing a business continuity plan (BCP) finds that the plan has not been tested in three years. The MOST significant risk is:

Accepted Answer

The plan may contain outdated procedures that fail during an actual disaster

Answer

Untested plans may reference decommissioned systems, departed personnel, or obsolete procedures, causing failures precisely when recovery is most critical.

Question 2

Which of the following BEST describes the role of a reciprocal agreement in business continuity?

Accepted Answer

Two organizations agree to provide each other computing resources in the event of a disaster

Answer

A reciprocal agreement is a mutual arrangement between two organizations to host each other's operations during a disaster, though resource conflicts are a known risk.

Question 3

During an IS audit, an auditor discovers that production data is used in the test environment without masking. The PRIMARY concern is:

Accepted Answer

Unauthorized exposure of sensitive personal or confidential data

Answer

Using unmasked production data in test environments exposes sensitive information to developers and testers who may not be authorized to view it, creating a privacy and compliance risk.

Question 4

What is the PRIMARY objective of an IT service continuity management (ITSCM) program?

Accepted Answer

Ensure IT services can be recovered within agreed timeframes to support business continuity

Answer

ITSCM focuses on ensuring that IT services supporting critical business processes can be restored within defined RTO and RPO targets.

Question 5

An IS auditor reviewing problem management should verify that:

Accepted Answer

Root cause analyses are completed and permanent fixes are tracked to closure

Answer

Effective problem management requires identifying root causes and ensuring permanent fixes are implemented and verified, not just documenting the occurrence.

(ISACA) Information Systems Audit and Control Association Certification Practice Test

(ISACA) Information Systems Audit and Control Association Certification Practice Test

ISACA Information Systems Operations and Business Resilience 4