Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISA Exam - Topic 5 Question 35 Discussion

During an audit of a disaster recovery plan (DRP) for a critical business area, an IS auditor finds that not all critical systems are covered. What should the auditor do NEXT?
B) Evaluate the impact of not covering the systems.
A) Verify whether the systems are part of the business impact analysis (BIA).
C) Evaluate the prior year's audit results regarding critical system coverage.
D) Escalate the finding to senior management.

Isaca CISA Exam - Topic 5 Question 35 Discussion

Actual exam question for Isaca's CISA exam
Question #: 35
Topic #: 5
[All CISA Questions]

During an audit of a disaster recovery plan (DRP) for a critical business area, an IS auditor finds that not all critical systems are covered. What should the auditor do NEXT?

Show Suggested Answer Hide Answer
Suggested Answer: B

by An at May 04, 2022, 02:47 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
James
8 months ago
Last year's audit results could provide useful context.
upvoted 0 times
...
Serita
8 months ago
Escalating to management seems like overkill.
upvoted 0 times
...
Carin
8 months ago
Surprised they missed critical systems in the first place!
upvoted 0 times
...
Annice
8 months ago
I think evaluating the impact is more important.
upvoted 0 times
...
Leontine
8 months ago
Definitely should check the BIA first!
upvoted 0 times
...
Clement
9 months ago
Escalating to senior management feels a bit drastic at this stage. Shouldn't we gather more information first before taking that step?
upvoted 0 times
...
Joaquin
9 months ago
I remember a practice question where we had to look at previous audit results. It might be useful to check last year's findings, but I wonder if that's the best immediate action.
upvoted 0 times
...
Marshall
9 months ago
I'm not entirely sure, but I feel like evaluating the impact of not covering the systems could be important too. It might help prioritize the next steps.
upvoted 0 times
...
Melissa
9 months ago
I think the first step should be to verify if those systems were included in the BIA. It seems like a logical starting point.
upvoted 0 times
...
Viva
9 months ago
Ah, I've seen this type of phishing email before. I think the answer is B - authority and urgency. The email is trying to create a sense of importance and time pressure to get the target to click the link.
upvoted 0 times
...
Sonia
9 months ago
Hmm, I'm not too familiar with the OceanStor 9000 system, so I'll need to think this through carefully. Let me re-read the question and options to make sure I understand the context.
upvoted 0 times
...
Hailey
9 months ago
Hmm, I'm a bit unsure about this one. I know provisioning has to do with setting aside funds to cover potential loan losses, but I'm not totally clear on how the "coverage ratio" is calculated. I'll need to think this through carefully.
upvoted 0 times
...
Delsie
10 months ago
This seems like a straightforward question about CAPWAP configuration. I'll review my notes on CAPWAP and active/standby failover to make sure I have the right approach.
upvoted 0 times
...
Lorean
10 months ago
This question feels familiar, I think we had a similar one on the practice tests—could it really be the highest amount listed?
upvoted 0 times
...

Save Cancel