Isaca CISA Exam - Topic 4 Question 76 Discussion

Actual exam question for Isaca's CISA exam

Question #: 76
Topic #: 4

[All CISA Questions]

Which of the following should be the GREATEST concern for an IS auditor reviewing recent disaster recovery operations?

AThe recovery point objective (RPO) was not defined.

BTest data was lost during a recovery operation.

CA warm site was used as a recovery strategy.

DA full backup was only performed once a week.

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by Judy at May 11, 2024, 11:55 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Monroe

6 months ago

Wait, are we really worried about the RPO over lost data?

upvoted 0 times

...

Sharita

6 months ago

Once a week for backups? That's risky!

upvoted 0 times

...

Youlanda

6 months ago

A warm site is better than nothing, right?

upvoted 0 times

...

Taryn

7 months ago

Totally agree, losing test data is a big deal too.

upvoted 0 times

...

Alverta

7 months ago

RPO not defined? That's a huge red flag!

upvoted 0 times

...

Veronika

7 months ago

A warm site seems okay, but I feel like it might not be the best option compared to hot sites. I’m a bit uncertain about that.

upvoted 0 times

...

Francoise

7 months ago

I think we practiced a question about backup frequency, and a weekly full backup seems risky if something happens mid-week.

upvoted 0 times

...

Carin

7 months ago

I’m not sure, but I feel like losing test data during recovery could really impact the testing process later on.

upvoted 0 times

...

Jerrod

8 months ago

I remember discussing RPO in class, and I think not having it defined could lead to major issues in recovery.

upvoted 0 times

...

Myra

8 months ago

I'm leaning towards option A as well. If the RPO wasn't defined, that could seriously impact the organization's ability to recover data and operations in the event of a disaster. The other options are concerning, but not as critical as the lack of an RPO.

upvoted 0 times

...

Miriam

8 months ago

Okay, I think I've got it. The GREATEST concern for an IS auditor reviewing recent disaster recovery operations would be if the recovery point objective (RPO) was not defined. That's a fundamental part of disaster recovery planning, so that's likely the most critical issue.

upvoted 0 times

...

Xochitl

8 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover different aspects of disaster recovery, but I'm not sure which one would be the GREATEST concern. I'll need to think this through carefully.

upvoted 0 times

...

Vincenza

8 months ago

This one seems tricky, but I think the key is to focus on the disaster recovery operations and what should be the biggest concern for an IS auditor. I'll need to carefully consider each option.

upvoted 0 times

...

Tommy

8 months ago

This seems like a straightforward question about situational influences on consumer behavior. I'm pretty confident the answer is B, social surroundings, since the girls were clearly influenced by each other's opinions and feedback.

upvoted 0 times

...

Frederica

8 months ago

I've got a good handle on this topic, so I'm confident I can select the right answers. I'll double-check my work, but I think I've got this.

upvoted 0 times

...

Arthur

1 year ago

Test data lost during a recovery? That's like forgetting your towel at the beach - not the end of the world, but still a major inconvenience.

upvoted 0 times

Christiane

11 months ago

C) A warm site was used as a recovery strategy.

upvoted 0 times

...

Cecil

11 months ago

B) Test data was lost during a recovery operation.

upvoted 0 times

...

Delisa

1 year ago

A) The recovery point objective (RPO) was not defined.

upvoted 0 times

...

Sang

1 year ago

Wait, they didn't even define the RPO? That's like trying to run a marathon without knowing the finish line. How are they supposed to know if the recovery was successful?

upvoted 0 times