Isaca CISA Exam - Topic 7 Question 64 Discussion

Actual exam question for Isaca's CISA exam

Question #: 64
Topic #: 7

An organization that operates an e-commerce website wants to provide continuous service to its customers and is planning to invest in a hot site due to service criticality. Which of the following is the MOST important consideration when making this decision?

AMaximum tolerable downtime (MTD)

BRecovery time objective (RTO)

CRecovery point objective (RPO)

DMean time to repair (MTTR)

Show Suggested Answer

Suggested Answer: B

Based on the information provided, the IS auditor should look for B: Project change management controls to ensure the risk associated with scope creep has been mitigated during software development. Project change management controls ensure that any changes made to the project are properly documented, communicated, and approved by the appropriate personnel. This helps to ensure that changes to the project are tracked and managed and that the project remains within its originally defined scope. Additionally, project change management controls help to ensure that any changes made are in line with the organization's goals and objectives.

by Ryan at Aug 07, 2023, 11:45 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cyril

6 months ago

Surprised no one mentioned the cost implications of a hot site!

upvoted 0 times

...

Yuette

6 months ago

Wait, isn't MTTR usually the focus in these cases?

upvoted 0 times

...

Goldie

7 months ago

RPO is important too, but not the top priority.

upvoted 0 times

...

Isidra

7 months ago

I think MTD is more critical here.

upvoted 0 times

...

Lettie

7 months ago

Definitely RTO is key for continuous service!

upvoted 0 times

...

Mona

7 months ago

Mean time to repair (MTTR) seems less relevant for this scenario since we're focused on continuous service. I think it’s more about RTO or MTD, but I can't recall the exact details.

upvoted 0 times

...

Dianne

7 months ago

I feel like recovery point objective (RPO) might be significant too, especially for e-commerce where data loss can be costly. But I’m not confident about which one is the top priority.

upvoted 0 times

...

Minna

8 months ago

I remember practicing a question about recovery time objective (RTO) and how it relates to service continuity. It seems like that could be the key consideration here.

upvoted 0 times

...

Kristel

8 months ago

I think the maximum tolerable downtime (MTD) is really important for deciding on a hot site, but I'm not entirely sure if it's the most critical factor.

upvoted 0 times

...

Phillip

8 months ago

Orthogonal Arrays seem like an interesting approach, but I'm not sure if it's the most likely technique for this specific scenario. I'll have to think about it some more.

upvoted 0 times

...

Phung

8 months ago

This seems like a straightforward question about the limitations of focusing solely on an organizational HR role. I'll carefully consider each option and choose the one that best describes the potential limitation.

upvoted 0 times

...

Dannie

8 months ago

I think the key here is to involve the right stakeholders. The team, Scrum Master, and Product Owner should all be present, and the Stakeholders should be consulted as well.

upvoted 0 times

...

Skye

1 year ago

Come on, guys, it's gotta be the Maximum Tolerable Downtime (MTD)! The organization can't afford to have their customers waiting around for too long, you know?

upvoted 0 times

Joaquin

1 year ago

B) Recovery time objective (RTO)

upvoted 0 times

...

Rueben

1 year ago

I think you're right, MTD is crucial for ensuring minimal disruption to the customers.

upvoted 0 times

...

Elly

1 year ago

A) Maximum tolerable downtime (MTD)

upvoted 0 times

...

Ligia

1 year ago

Haha, looks like we've got a real battle of the acronyms here! I'd go with the Mean Time to Repair (MTTR) - the faster they can get things up and running, the better.

upvoted 0 times

Teri

11 months ago

True, but Recovery point objective (RPO) is also important to prevent data loss.

upvoted 0 times

...

Krystina

11 months ago

I agree, but I believe Maximum tolerable downtime (MTD) should be the top priority to minimize customer impact.

upvoted 0 times

...

Kenneth

11 months ago

I think Recovery time objective (RTO) is crucial for ensuring quick recovery.

upvoted 0 times

...

Holley

11 months ago

D) Mean time to repair (MTTR)

upvoted 0 times

...

Dion

11 months ago

C) Recovery point objective (RPO)

upvoted 0 times

...

Barrett

11 months ago

B) Recovery time objective (RTO)

upvoted 0 times

...

Brigette

12 months ago

A) Maximum tolerable downtime (MTD)

upvoted 0 times

...

Staci

1 year ago

I disagree, the Recovery Point Objective (RPO) is more critical. The organization needs to be able to restore data to a point in time that minimizes data loss and ensures customer satisfaction.

upvoted 0 times

...

Ronny

1 year ago

I think the most important consideration here is the Recovery Time Objective (RTO). The organization needs to ensure that it can resume operations as quickly as possible in the event of an outage.

upvoted 0 times