Isaca CISA Exam - Topic 1 Question 75 Discussion

Actual exam question for Isaca's CISA exam

Question #: 75
Topic #: 1

A national bank recently migrated a large number of business-critical applications to the cloud. Which of the following is MOST important to ensuring the resiliency of the applications?

ANegotiating a nondisclosure agreement (NDA) with the provider

BConducting periodic system stress testing

CCreating restore points for critical applications

DUsing a monitoring tool to assess uptime

Show Suggested Answer

Suggested Answer: B

The most appropriate IS audit recommendation for a bank that wants to outsource a system to a cloud provider residing in another country is to ensure the provider's internal control system meets bank requirements. This is because the cloud provider will be handling the bank's data, so it is important to ensure that the provider has appropriate controls in place to protect the data and to ensure its integrity. Additionally, the provider should have policies and procedures in place to ensure the security and privacy of the data, as well as to ensure compliance with applicable laws and regulations. For more information, please refer to the ISACA CISA Study Guide section 4.13.2.2.

by Alpha at May 02, 2024, 06:53 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annamae

6 months ago

Monitoring tools are a must for uptime assessment!

upvoted 0 times

...

Joni

6 months ago

Wait, are NDAs really that important for resiliency?

upvoted 0 times

...

Aileen

6 months ago

Restore points are crucial too, can't overlook that.

upvoted 0 times

...

Rhea

7 months ago

Totally agree, stress testing helps identify weaknesses!

upvoted 0 times

...

Noble

7 months ago

Periodic system stress testing is key for resiliency.

upvoted 0 times

...

Azalee

7 months ago

I vaguely recall that negotiating an NDA is more about security than resiliency. I think it’s not the most important factor here.

upvoted 0 times

...

Erinn

7 months ago

I feel like using a monitoring tool to assess uptime is important, but I wonder if it’s enough on its own to ensure resiliency.

upvoted 0 times

...

Lauryn

7 months ago

I'm not entirely sure, but I think conducting periodic system stress testing could help identify weaknesses. It might be crucial for resiliency too.

upvoted 0 times

...

Gertude

8 months ago

I remember we discussed the importance of having restore points for critical applications during our cloud migration case studies. It seems like a solid choice.

upvoted 0 times

...

Norah

8 months ago

I'm a bit confused on this one. I was considering D - using a monitoring tool to assess uptime, but now I'm not so sure. I'll have to re-read the question carefully and think it through.

upvoted 0 times

...

Ira

8 months ago

Okay, let's see. I think the key here is ensuring the applications can withstand any issues or disruptions. So I'm leaning towards B as well - stress testing seems like the best way to do that.

upvoted 0 times

...

Tamekia

8 months ago

I'm pretty confident that the answer is B - conducting periodic system stress testing. That seems like the most important thing to ensure the resiliency of the applications.

upvoted 0 times

...

Jacquline

8 months ago

Hmm, I'm not sure about this one. I'm debating between B and C - creating restore points for critical applications. I'll have to think it through a bit more.

upvoted 0 times

...

Ming

8 months ago

Hmm, this looks like a tricky one. I'll need to carefully analyze the information provided in the question and the image to determine the maximum bandwidth allocated to policer 2.

upvoted 0 times

...

Sanda

8 months ago

Option D sounds promising, but I'm not totally confident. As widgets are added to the form, the underlying XSD is updated automatically? That seems like the most relevant detail to the "data-first approach" mentioned in the question.

upvoted 0 times

...

Glory

8 months ago

Hmm, I'm a bit unsure about this one. I know the DataRaptor actions are related to Salesforce, but I'm not sure which ones can actually retrieve data. I'll have to think this through carefully.

upvoted 0 times

...

Kathryn

1 year ago

C'mon, really? An NDA? What is this, a spy movie?

upvoted 0 times

...

Lai

1 year ago

A) Negotiating an NDA with the provider? Really? That's not going to help with the resiliency of the applications at all.

upvoted 0 times

Oretha

11 months ago

A) Negotiating an NDA with the provider? Really? That's not going to help with the resiliency of the applications at all.

upvoted 0 times

...

Margarett

11 months ago

D) Using a monitoring tool to assess uptime

upvoted 0 times

...

Casandra

11 months ago

C) Creating restore points for critical applications

upvoted 0 times

...

Willodean

11 months ago

D) Using a monitoring tool to assess uptime

upvoted 0 times

...

Maryrose

11 months ago

C) Creating restore points for critical applications

upvoted 0 times

...

Ressie

12 months ago

B) Conducting periodic system stress testing

upvoted 0 times

...

Slyvia

12 months ago

B) Conducting periodic system stress testing

upvoted 0 times

...

Jutta

1 year ago

B) Conducting periodic system stress testing is a good practice, but it doesn't directly address ensuring the resiliency of the applications.

upvoted 0 times

Jordan

11 months ago

D) Using a monitoring tool to assess uptime

upvoted 0 times

...

Leigha

11 months ago

B) Conducting periodic system stress testing

upvoted 0 times

...

Albina

12 months ago

A) Negotiating a nondisclosure agreement (NDA) with the provider

upvoted 0 times

...

Reita

1 year ago

D) Using a monitoring tool to assess uptime is also important, but it's more about monitoring the system rather than ensuring its resiliency in the event of an issue.

upvoted 0 times

Lavera

12 months ago

D: Using a monitoring tool to assess uptime can help ensure that the applications are running smoothly.

upvoted 0 times

...

Pok

1 year ago

C: Creating restore points for critical applications is also important in case something goes wrong.

upvoted 0 times

...

Miss

1 year ago

B: I agree, stress testing can help identify potential weaknesses in the system.

upvoted 0 times

...

Linsey

1 year ago

C) Creating restore points for critical applications

upvoted 0 times

...

Linsey

1 year ago

B) Conducting periodic system stress testing

upvoted 0 times

...

Billye

1 year ago

A: I think conducting periodic system stress testing is crucial for ensuring the resiliency of the applications.

upvoted 0 times

...

Joseph

1 year ago

Creating restore points for critical applications is also important in case of failures.

upvoted 0 times

...

Eleni

1 year ago

C) Creating restore points for critical applications seems like the most logical choice to ensure the resiliency of the applications. Backup and recovery are crucial when migrating to the cloud.

upvoted 0 times

...

Elfriede

1 year ago

I agree with Laticia. Stress testing can help identify weaknesses in the applications.

upvoted 0 times

...

Laticia

1 year ago

I think conducting periodic system stress testing is crucial for ensuring resiliency.

upvoted 0 times

...