Home > Articles

Maintaining Critical Services

  • Jan 1, 2099
This chapter is from the book

This chapter is from the book

Certified Information Systems Auditor (CISA) Cert GuideCertified Information Systems Auditor (CISA) Cert Guide

Learn More Buy

This chapter is from the book

This chapter is from the book

Certified Information Systems Auditor (CISA) Cert GuideCertified Information Systems Auditor (CISA) Cert Guide

Learn More Buy

The following exam domain is partially covered in this chapter:

Domain 4—Information Systems Operations, Maintenance and Service Management

This chapter covers the following topics:

  • Threats to Business Operations: Businesses face many threats and must have the proper controls and countermeasures to deal with them.
  • The Business Continuity Planning (BCP) Process: One of the key activities of business continuity is the measurement of the performance of the program. Good governance presumes analysis of ongoing business processes to ensure that they are fulfilling company objectives.
  • Recovery Strategies: Many different recovery strategies exist to deal with potential outages. An organization must choose the right one to ensure that critical activities can continue.

“Do I Know This Already?” Quiz

The “Do I Know This Already?” quiz allows you to assess whether you should read this entire chapter thoroughly or jump to the “Exam Preparation Tasks” section. If you are in doubt about your answers to these questions or your own assessment of your knowledge of the topics, read the entire chapter. Table 4-1 lists the major headings in this chapter and their corresponding “Do I Know This Already?” quiz questions. You can find the answers at the bottom of the page following the quiz and in Appendix A, “Answers to the ‘Do I Know This Already?’ Quizzes and Review Questions.”

Table 4-1 “Do I Know This Already?” Section-to-Question Mapping

Foundation Topics Section

Questions Covered in This Section

Threats to Business Operations

1, 10

The Business Continuity Planning (BCP) Process

2–5

Recovery Strategies

6–9

Caution

The goal of self-assessment is to gauge your mastery of the topics in this chapter. If you do not know the answer to a question or are only partially sure of the answer, you should mark that question as incorrect for purposes of the self-assessment. Giving yourself credit for an answer you correctly guess skews your self-assessment results and might provide you with a false sense of security.

  1. Which of the following is the highest level of incident classification?

    1. Major

    2. Minor

    3. Defined

    4. Crisis

  2. From an audit perspective, what best defines how current the data must be or how much data an organization can afford to lose?

    1. RTO

    2. RPO

    3. MTD

    4. WRT

  3. Which of the following specifies the maximum elapsed time to recover an application at an alternate site?

    1. RTO

    2. RPO

    3. MTD

    4. WRT

  4. Which of the following defines the maximum amount of time the organization can provide services at the alternate site? This value can be determined by items such as contractual values.

    1. SDO

    2. SLA

    3. MTD

    4. WRT

  5. Which of the following activities are specifically required for critical processes and produce revenue?

    1. Core processing

    2. Non-discretionary processes

    3. Maximum acceptable outage

    4. Supporting processes

  6. Which version of RAID offers no fault tolerance?

    1. RAID 0

    2. RAID 1

    3. RAID 10

    4. RAID 15

  7. This tape-rotation scheme is named after a mathematical puzzle.

    1. Grandfather, Father, Son

    2. Complex

    3. Simple

    4. Tower of Hanoi

  8. This recovery option is sometimes referred to as a gentleman’s agreement.

    1. Hot site

    2. Redundant site

    3. Reciprocal

    4. Grandfather, father, son

  9. Which of the following would be used to describe a non-repairable item that has reached end of life?

    1. MTTR

    2. MTTF

    3. MTBF

    4. SLA

  10. Which of the following is the lowest level of incident classification?

    1. Major

    2. Minor

    3. Negligible

    4. Crisis

Pearson IT Certification Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from Pearson IT Certification and its family of brands. I can unsubscribe at any time.