CISAβCertified Information Systems Auditor - Part 315
1. Which of the following is the MOST important consideration when defining recovery point objectives (RPOs)?
A) Minimum operating requirements
B) Acceptable data loss
C) Mean time between failures
D) Acceptable time for recovery
2. A structured walk-through test of a disaster recovery plan involves:
A) representatives from each of the functional areas coming together to go over the plan.
B) all employees who participate in the day-to-day operations coming together to practice executing the plan.
C) moving the systems to the alternate processing site and performing processing operations.
D) distributing copies of the plan to the various functional areas for review.
3. In a contract with a hot, warm or cold site, contractual provisions should cover which of the following considerations?
A) Physical security measures
B) Total number of subscribers
C) Number of subscribers permitted to use a site at one time
D) References by other users
4. Which of the following is the GREATEST concern when an organization's backup facility is at a warm site?
A) Timely availability of hardware
B) Availability of heat, humidity and air conditioning equipment
C) Adequacy of electrical power connections
D) Effectiveness of the telecommunications network
5. Which of the following recovery strategies is MOST appropriate for a business having multiple offices within a region and a limited recovery budget?
A) A hot site maintained by the business
B) A commercial cold site
C) A reciprocal arrangement between its offices
D) A third-party hot site
A) Minimum operating requirements
B) Acceptable data loss
C) Mean time between failures
D) Acceptable time for recovery
2. A structured walk-through test of a disaster recovery plan involves:
A) representatives from each of the functional areas coming together to go over the plan.
B) all employees who participate in the day-to-day operations coming together to practice executing the plan.
C) moving the systems to the alternate processing site and performing processing operations.
D) distributing copies of the plan to the various functional areas for review.
3. In a contract with a hot, warm or cold site, contractual provisions should cover which of the following considerations?
A) Physical security measures
B) Total number of subscribers
C) Number of subscribers permitted to use a site at one time
D) References by other users
4. Which of the following is the GREATEST concern when an organization's backup facility is at a warm site?
A) Timely availability of hardware
B) Availability of heat, humidity and air conditioning equipment
C) Adequacy of electrical power connections
D) Effectiveness of the telecommunications network
5. Which of the following recovery strategies is MOST appropriate for a business having multiple offices within a region and a limited recovery budget?
A) A hot site maintained by the business
B) A commercial cold site
C) A reciprocal arrangement between its offices
D) A third-party hot site
1. Right Answer: B
Explanation: Recovery time objectives (RTOs) are the acceptable time delay in availability of business operations, while recovery point objectives (RPOs) are the level of data loss/reworking an organization is willing to accept. Mean time between failures and minimum operating requirements help in defining recovery strategies.
2. Right Answer: B
Explanation: A structured walk-through test of a disaster recovery plan involves representatives from each of the functional areas coming together to review the plan to determine if the plan pertaining to their area is accurate and complete and can be implemented when required. Choice B is a simulation test to prepare and train the personnel who will be required to respond to disasters and disruptions. Choice C is a form of parallel testing to ensure that critical systems will perform satisfactorily in the alternate site. Choice D is a checklist test.
3. Right Answer: C
Explanation: The contract should specify the number of subscribers permitted to use the site at any one time. Physical security measures are not a part of the contract, although they are an important consideration when choosing a third-party site. The total number of subscribers is not a consideration; what is important is whether the agreement limits the number of subscribers in a building or in a specific area. The references that other users can provide is a consideration taken before signing the contract; it is by no means part of the contractual provisions.
4. Right Answer: A
Explanation: A warm site has the basic infrastructure facilities implemented, such as power, air conditioning and networking, but is normally lacking computing equipment.Therefore, the availability of hardware becomes a primary concern.
5. Right Answer: C
Explanation: For a business having many offices within a region, a reciprocal arrangement among its offices would be most appropriate. Each office could be designated as a recovery site for some other office. This would be the least expensive approach to providing an acceptable level of confidence. A hot site maintained by the business would be a costly solution but would provide a high degree of confidence. Multiple cold sites leased for the multiple offices would lead to a costly solution with a high degree of confidence. A third-party facility for recovery is provided by a traditional hot site. This would be a costly approach providing a high degree of confidence.
Explanation: Recovery time objectives (RTOs) are the acceptable time delay in availability of business operations, while recovery point objectives (RPOs) are the level of data loss/reworking an organization is willing to accept. Mean time between failures and minimum operating requirements help in defining recovery strategies.
2. Right Answer: B
Explanation: A structured walk-through test of a disaster recovery plan involves representatives from each of the functional areas coming together to review the plan to determine if the plan pertaining to their area is accurate and complete and can be implemented when required. Choice B is a simulation test to prepare and train the personnel who will be required to respond to disasters and disruptions. Choice C is a form of parallel testing to ensure that critical systems will perform satisfactorily in the alternate site. Choice D is a checklist test.
3. Right Answer: C
Explanation: The contract should specify the number of subscribers permitted to use the site at any one time. Physical security measures are not a part of the contract, although they are an important consideration when choosing a third-party site. The total number of subscribers is not a consideration; what is important is whether the agreement limits the number of subscribers in a building or in a specific area. The references that other users can provide is a consideration taken before signing the contract; it is by no means part of the contractual provisions.
4. Right Answer: A
Explanation: A warm site has the basic infrastructure facilities implemented, such as power, air conditioning and networking, but is normally lacking computing equipment.Therefore, the availability of hardware becomes a primary concern.
5. Right Answer: C
Explanation: For a business having many offices within a region, a reciprocal arrangement among its offices would be most appropriate. Each office could be designated as a recovery site for some other office. This would be the least expensive approach to providing an acceptable level of confidence. A hot site maintained by the business would be a costly solution but would provide a high degree of confidence. Multiple cold sites leased for the multiple offices would lead to a costly solution with a high degree of confidence. A third-party facility for recovery is provided by a traditional hot site. This would be a costly approach providing a high degree of confidence.
Comments
0
CA Foundation Business Economics Questions 2023 - Part 32
03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 31
03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 29
03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 28
03 Mar 2023
