Maintaining Critical Services

This chapter is from the book

Certified Information Systems Auditor (CISA) Cert Guide

Learn More Buy

This chapter is from the book

This chapter is from the book 

Certified Information Systems Auditor (CISA) Cert Guide

Learn More Buy

Review Questions

1. Which of the following should be the primary objective when using tape backup as a recovery strategy?

   1. That the RPO is high

   2. That the RPO is low

   3. That the RTO is low

   4. That fault tolerance is low

2. When performing an audit, which of the following is the best reason to use a hot site?

   1. It can be used for long-term processing.

   2. It is not a subscription service.

   3. There is no additional cost for using it or periodic testing.

   4. It is ready for service.

3. Which of the following is the greatest advantage of JBOD?

   1. In case of drive failure, only the data on the affected drive is lost.

   2. It is superior to disk mirroring.

   3. It offers greater performance gains than RAID.

   4. It offers greater fault tolerance than RAID.

4. Which of the following processes is most critical in terms of revenue generation?

   1. Discretionary

   2. Supporting

   3. Core

   4. Critical

5. As an auditor, how often would you say that a business continuity plan should be updated?

   1. Every five years

   2. Every year or as required

   3. Every six months

   4. Upon any change or modification

6. During an audit, you have been asked to review the disaster recovery and backup processes. When maintaining data backups at offsite locations, which of the following is the best way to control concern?

   1. The storage site should be as secure as the primary site.

   2. A suitable tape-rotation plan should be in use.

   3. That backup media should be tested regularly.

   4. That copies of current critical information should be kept offsite.

7. Which of the following is the most important purpose of BIA?

   1. Identifying countermeasures

   2. Prioritizing critical systems

   3. Developing recovery strategies

   4. Determining potential test strategies

8. Which of the following is not a valid BCP test type?

   1. Paper test

   2. Structured walk-through

   3. Full operation test

   4. Preparedness test

9. Which of the following is the practice of routing traffic through different cable facilities?

   1. Alternate routing

   2. Long-haul diversity

   3. Diverse routing

   4. Last-mile protection

10. When classifying critical systems, which category matches the following description: “These functions are important and can be performed by a backup manual process but not for a long period of time?”

    1. Vital

    2. Sensitive

    3. Critical

    4. Demand driven