CISA Domain 4 Practice Exam

These questions are part of the practice quiz. Start practicing

• A lower recovery time objective typically results in which of the following?
• What is a detective control that does not ensure the integrity of data in a database?
• What is the impact of a lower recovery time objective on recovery strategies?
• Which approval is most important for ensuring system resources for a disaster recovery plan?
• Which disaster recovery testing technique is considered the most efficient to determine the effectiveness of a plan?
• Which recovery plan scenario provides the best protection for critical applications during a disaster?
• During an audit, what should be the primary concern regarding system parameters?
• What is the most effective control for enforcing accountability among users accessing sensitive database information?
• What is the purpose of a check digit in accounts payable transaction registers?
• What is the primary focus of network monitoring tools in terms of network performance?
• What is the primary reason an organization would use emergency change control for an application?
• What should an auditor recommend regarding system performance concerns expressed by business units?
• What is the most effective method for an IS auditor to determine compliance with change control procedures?
• What is the best audit recommendation for an IS auditor if DBAs can purge logs from the database server?
• What can be concluded if an IS auditor finds frequent changes to a network without documentation?
• What is the impact of utilizing offsite storage in disaster recovery plans?
• What method of routing traffic through split-cable facilities is referred to as?
• When an IS auditor suspects unlicensed software usage, what should be the auditor's first action?
• What factor is critical in selecting a third-party vendor for backup storage services?
• Why is having a cold site considered advantageous for disaster recovery?
• What control would BEST mitigate the risk of unauthorized program changes in a production environment?
• What is the best control an IS auditor can recommend to monitor availability in a SaaS model?
• What should be the focus of a disaster recovery plan concerning hardware resources?
• What is the primary purpose of a business impact analysis?
• Which control is MOST effective in ensuring that an unauthorized interest rate change is not processed?
• A hot site should be implemented as a recovery strategy when:
• What is essential for conducting an effective review of a database?
• What does a deskcheck test primarily serve to ensure?
• Which aspect is crucial for data backup in case of business disruptions?
• Which of the following is a crucial step in updating a business continuity plan?
• What is the best recommendation when notification systems could be impacted during a business continuity simulation?
• Which approach BEST mitigates risks from using reciprocal agreements as a recovery strategy?
• In the business impact analysis, which factor should be identified first?
• Which clause regarding the right to audit in an outsourcing contract is vital for oversight?
• What is the primary focus of a cold site in data recovery planning?
• What is a critical consideration for providing backups specifically for online systems?
• What does applying a retention date on a file ensure?
• What is the MOST critical factor affecting the quality of data in a data warehouse?
• To avoid crashes in production servers after installing a security patch, what should an IS auditor ensure?
• What is most important when applying an operating system patch in a production environment?
• The media creation date at a warm recovery site is primarily based on which criterion?
• Which type of site is characterized by having immediate hardware availability but is more expensive to maintain?
• In a relational database with referential integrity, which key prevents the deletion of a row from a customer table while referencing it in orders?
• What is the best method to ensure that incident response activities are aligned with business continuity requirements?
• What is a common challenge for establishing responsibility and reporting lines during audits of automated systems?
• Which risk treatment approach is applied when organizations have reciprocal disaster recovery agreements?
• Which report is most suitable for an IS auditor to verify compliance with a service level agreement by an ISP?
• What should an IS auditor evaluate to ensure personnel are aware of their emergency roles?
• What control is essential for accountability in production database updates?
• What task should be performed first when preparing a disaster recovery plan?
• What is the MOST effective method for disposing of magnetic media that contains confidential information?
• Which clause is most concerning for an IS auditor when reviewing an outsourcing contract?
• What is a key reason for having protocols and procedures in place for patch management?
• How can an IS auditor verify that a business continuity plan (BCP) is effective?
• What is the significance of exception reporting in problem management mechanisms?
• In case of emergency changes to a database after normal working hours, how should a database administrator (DBA) log in?
• Which tool should be used to understand an organization’s business processes while developing a business continuity plan?
• When reviewing an organization's disaster recovery plan, what should an IS auditor primarily verify?
• What is the primary goal of a business impact analysis in the recovery planning process?
• What is a key goal of a functional test in business continuity planning?
• Which area of operations is considered to have the HIGHEST risk when setting up a new overseas database?
• Which database control helps maintain transaction integrity in an online transaction processing system?
• To ensure the availability of transactions in the event of a disaster, what method should be utilized?
• What aspect of business continuity planning does disaster recovery planning specifically address?
• To ensure structured disaster recovery, which is the most important aspect of a business continuity plan?
• Which aspect is vital to the effectiveness of a disaster recovery plan?
• If a business process has a recovery time objective equal to zero, what does this imply?
• Which of the following would BEST help to detect errors in data processing?
• What is vital for maintaining the integrity of a production environment?
• Which observation during a test comparing job run logs to computer job schedules would be of GREATEST concern to an IS auditor?
• If a live test of business continuity efforts reveals that workflows are not functioning as expected, which action is most recommended?
• Which audit procedure is best for detecting unauthorized changes to production code?
• For effective implementation of a business continuity plan, what is most important?
• Which security measure is most effective in ensuring the integrity of information in a data warehouse?
• For a duplicate information processing facility to be viable, which criterion must be met?
• What is the most significant concern for an IS auditor reviewing the compliance of installed software within an organization?
• What is a limitation of relying solely on the incident response plan for managing security incidents?
• When assessing a hardware maintenance program, which aspect should an IS auditor validate?
• How should an IS auditor handle a situation where the effectiveness of a business continuity plan is being tested?
• Why is supervisory approval important in managing privileged accounts?
• When designing a business continuity plan for an airline reservation system, which data transfer method is most appropriate for backup at an offsite location?
• Which technology best supports 24/7 availability for critical systems?
• What should an IS auditor do if they find that a database administrator has read and write access to production data?
• Which activity during peak production hours is likely to cause unexpected downtime?
• What is the most critical element for effectively executing a disaster recovery plan?
• What process should be reviewed by an IS auditor to ensure that security patch installations do not lead to system crashes in the future?
• What is the goal of an optimized disaster recovery plan?
• What is the GREATEST advantage of using web services for information exchange between systems?
• What is the most effective method for an IS auditor to ensure that production servers have the latest security updates?
• In a business impact analysis, what should be the goal when developing strategies for business continuity?
• What is one key outcome of an effective incident management process related to service level agreements?
• What is the primary assurance gained from a live test of a mutual agreement for IT system recovery?
• What is a significant risk concerning disaster recovery plans regarding untested DRPs?
• What is the primary factor in designing a data backup strategy for natural disasters?
• What is the MOST effective method for verifying the correctness of individual account balances after a database migration?
• Vendors have released patches fixing security flaws in their software. What should an IS auditor recommend in this situation?
• Who is the best source of information for determining the criticality of application systems in a business impact analysis?
• What is the primary purpose of an IT manager monitoring technical capacity?
• What major risk arises from an undefined point at which a situation is declared a crisis in a business continuity plan?
• Which factor is least likely to influence the effectiveness of a business continuity plan?
• What is the primary goal of implementing a disaster recovery plan in an organization?
• Which factor should NOT be prioritized in a disaster recovery strategy regarding cost considerations?
• What is the best indicator of the effectiveness of backup and restore procedures after a disaster?
• Which process is recommended for recording baselines for software releases?
• What aspect is primarily influenced by identifying critical processes during a business impact analysis?
• If a hard disk containing confidential data is damaged beyond repair, what is the most effective action to take before discarding it?
• An auditor notices that an organization frequently changes staff without appropriate documentation. What risk does this pose?
• What is the most critical factor in determining the recovery point objective for a key enterprise process?
• What is a secondary objective of a business continuity and disaster recovery plan?
• What constitutes the GREATEST exposure during a database server audit?
• After hardware replacement at the primary facility, what should the business continuity manager do first?
• Who is primarily responsible for authorizing access to application data?
• For multiple applications hosted on the same server, what determines the recovery time objective (RTO) for that server?
• What provides evidence of potential limitations in a business continuity plan?
• In disaster recovery, what does an organization need to assess for their recovery point objective?
• What is the greatest risk associated with reciprocal agreements for disaster recovery between two business units?
• Understanding which of the following is critical for maintaining compliance with internal service levels?
• In what context are performance issues most critical when reviewing a system?
• Which recovery strategy is most appropriate for a sensitive system with a high recovery time objective (RTO)?
• Which statement best describes the importance of backup intervals for an organization’s disaster recovery requirements?
• What is a key factor in confirming disaster recovery procedures are adequate?
• What is a key aspect of a successful change management process?
• What aspect should an IS auditor be most concerned with when reviewing a disaster recovery plan?
• What factor is critical when determining the authorization of program changes in application maintenance?
• In evaluating programmed controls over password management, which of the following would the IS auditor MOST likely rely on?
• What is the best control to limit risk when using privileged accounts for configuration changes?
• Which factor would contribute most to an effective business continuity plan?
• A company with a 72-hour recovery time objective and a 24-hour recovery point objective would most effectively be served by what type of site?
• Which type of business continuity plan test focuses on proper coordination among crisis management team members?
• When auditing the onsite archiving process of emails, the IS auditor should pay the MOST attention to:
• Which control mechanism BEST helps reduce research time for investigating exceptions in data file change management?
• After completing an annual risk assessment, what should an IS auditor recommend for the business continuity plan?
• What is the best method for determining the criticality of each application system in a production environment?
• What is an important focus for an IS auditor when reviewing the log of program changes during an application maintenance audit?
• In what scenario is it ideal to use a differential backup instead of an incremental backup?
• Which process is most effective in reducing the risk of unauthorized software being distributed to a production server?
• What is the best way to mitigate the risk of losing irreplaceable backup media during transit?
• Which of the following methods can BEST help manage the recording of changes to a database?
• What should an IS auditor focus on the most when assessing a service level agreement (SLA) with an outsourced service provider?
• What should an IS auditor recommend if a new application patch is available but deemed unnecessary?
• What role does periodic testing of a disaster recovery plan fulfill?
• What is the GREATEST concern for an IS auditor reviewing an in-house developed application?
• Which element is NOT essential for an effective disaster recovery strategy?
• After completing a business impact analysis, what is the next step in business continuity planning?
• What is the primary objective of testing a business continuity plan?
• When verifying a change management process after a server crash, an auditor's review should focus on:
• What is the primary method to ensure the integrity of transaction processing in a database?
• Which of the following is widely accepted as one of the critical components in network management?
• What is the most suitable recovery strategy for a business with multiple offices and a restricted recovery budget?
• What presents the greatest risk when reviewing a disaster recovery plan that was implemented correctly but has concerns?
• In a business continuity audit, which aspect is MOST important to verify?
• Which control is the most important for ensuring system availability during a change management process?
• Which statement best describes the importance of testing a disaster recovery plan?
• Which control would best resolve unauthorized system data changes while maintaining business operations?
• What is the greatest concern an IS auditor should have during a review of a disaster recovery hot site?
• What is a good compensating control for a developer with full access to production data?
• What should an IS auditor do if they find that some tables in a database are not normalized?
• Why is it important to monitor downtime reports generated internally by an enterprise?
• In disaster recovery planning, what should be the primary focus for early recovery?
• What is the first step in the execution of a problem management mechanism?
• Which of the following is a network diagnostic tool that monitors and records network information?
• If an IS auditor finds that some hard drives were not sanitized before disposal, what should be the auditor's first step?
• Denormalizing some database tables typically results in which of the following?
• What provides the best evidence of an organization's disaster recovery capability readiness?
• What does integrity constraints in a database specifically prevent?
• What must be established for an organization's disaster recovery plan to effectively address system prioritization following a disaster?
• What control should an IS auditor recommend to avoid out-of-range data in a database?
• Which of the following signifies a risk when assessing an SLA for a cloud service provider?
• When designing emergency change control procedures, how can accountability for system support personnel be best ensured?
• To evaluate a preventive computer maintenance program effectively, what should an IS auditor consider most helpful?
• In the context of disaster recovery, what refers to the maximum amount of time that an organization can tolerate its operations being unavailable?
• What method MOST likely ensures the success of disaster recovery efforts?
• What aspect would be most important for the IS auditor to focus on when reviewing the integrity of a database?
• Which factor is NOT directly related to RAID level 1 functionality?
• What is the primary purpose of using data flow diagrams by IS auditors?
• An offsite facility with no computer or communications equipment is classified as a?
• Which statement is true regarding the relationship between downtime costs and the recovery time objective?
• What aspect of an organization's disaster recovery plan is likely defined incorrectly if not all critical data is retained?
• What is the greatest concern for an IS auditor after a change in the maintenance vendor for critical systems?
• What is the most effective method for testing the design effectiveness of a change control process?
• What is the key benefit of a well-defined security policy?
• What should be done after a disaster to ensure recovery objectives have been met?
• What should the IS auditor recommend if the IS director has superuser-privilege access for role changes?
• Which of the following represents the GREATEST risk created by a reciprocal agreement for disaster recovery made between two companies?
• Which disaster recovery solution is most cost-effective for a financial system with a zero recovery point objective and a 72-hour recovery time objective?
• Recovery procedures for an information processing facility are best based on which objective?
• Which option is the most reasonable for recovering a non-critical system?
• In an IT disaster recovery plan, what should the IS auditor primarily ensure is covered?
• From an audit perspective, what is the most critical document to review when engaging a new IT service provider?
• What method best ensures users have uninterrupted access to a heavily-used web application?
• When multiple plans are developed for business continuity, what must be ensured?
• What would be considered an adequate set of compensating controls for changes made to a database after normal hours?
• To best detect malicious activity from a programmer who modified and restored production code, which procedure should be employed?
• After a major incident, what should an incident response team address first in an information processing facility?
• When assessing access controls, which area should remain a top priority?
• If an IS auditor discovers that a disaster recovery plan does not include a cloud-hosted application, what should be the auditor's next course of action?
• How does a robust acceptable use policy affect user behavior regarding unauthorized software?
• What aspect of capacity monitoring is MOST essential according to continuous IT resource monitoring?
• Which backup strategy is most efficient for large quantities of mission-critical data in a continuous operation environment?
• What should an IS auditor do when they notice continuous addition of storage resources in IT infrastructure?
• Which aspect should an IS auditor be most concerned about when reviewing a business continuity plan?
• What is the next recommended testing step for an organization that has developed a new business continuity plan after conducting a basic tabletop exercise?
• If a database is restored using before-image dumps, where should the process begin following an interruption?
• In a scenario where a production batch job failed after modifications post-user acceptance testing, which control is most effective to prevent future risks?
• Which aspect is most concerning during an audit of a third-party application?
• Which method is best to mitigate risks related to emergency changes directly to production in a small organization?
• Why is it important to integrate the testing of non-critical systems in disaster recovery plans with business continuity plans?
• When selecting a location for an offsite storage facility for IS backup files, what is the most important criterion?
• An IS auditor needs to review the procedures used to restore a software application to its state prior to an upgrade. Which procedure should the auditor assess?
• What is a major concern for an IS auditor reviewing a business continuity plan?
• Which of the following indicates a necessity for monitoring disaster recovery procedures?
• Which of the following BEST helps to define disaster recovery strategies?
• What should an IS auditor prioritize when experiencing decreased query performance in a data warehouse?
• During an assessment of software development practices, what is the GREATEST concern regarding the use of open source software?
• What approach should an organization take when administrators request to reduce testing of critical security patches?
• What is a MAJOR concern during a review of help desk activities?
• When hiring a service provider, which item must be emphasized in the assessment process?
• How should an IS auditor address long login times during peak hours?
• Which practice is essential to avoid unexpected downtime during maintenance activities?
• What should an IS auditor recommend to optimize a business continuity plan?
• What effect does implementing a disaster recovery plan (DRP) generally have on the costs of ongoing operations?
• Which approach enhances the portability of a database-connected application?
• Which of the following backup techniques is the most appropriate for extremely granular data restore points?
• Which type of testing is essential before finalizing a software application upgrade?
• Which is a critical aspect of managing configuration changes in software applications?
• In relation to database management, what does "durability" guarantee?
• What should be a primary focus of an IS auditor reviewing a disaster recovery plan?
• Which control provides the GREATEST assurance of database integrity?
• When analyzing database transaction logs, which outcome indicates a violation of atomicity?
• Which of the following is crucial for defining recovery strategies after a disaster declaration?
• When examining the security configuration of an operating system, an IS auditor should review:
• During a fire alarm in a data center, what is the most important action for the staff?
• What is the initial step an IS auditor should take when reviewing a business continuity plan's crisis declaration process?
• What transaction processing feature is violated if a database transaction is partially executed and not rolled back?
• What is the most appropriate recommendation for an IS auditor discovering personal software installations on users' PCs, where the policy lacks explicit prohibition?
• What is a primary concern when integrating multiple BCPs from different departments?
• What is the best approach to prevent critical IT system failures from recurring?
• Which analysis is crucial for prioritizing the recovery of IT assets during disaster recovery planning?
• The objective of concurrency control in a database system is to:
• What ensures accountability when updating data in a production database?
• During an IT disaster recovery test, what issue should be of greatest concern to the IS auditor?
• Which report should an IS auditor check to ensure compliance with a service level agreement's uptime requirement?
• If the change management process in a production system fails and lacks documentation, what should the IS auditor do next?
• What is a prevalent risk associated with the development of end-user computing applications?
• If the recovery time objective increases, what else increases?
• What should the IS auditor review to ensure servers are optimally configured for processing requirements?
• An IS auditor evaluating high-availability networks should be most concerned if:
• What major concern arises when disaster recovery strategies are modified?
• Which practice is least effective when managing system updates?
• When assessing understanding of roles in a business continuity plan, the IS auditor evaluates what?
• What is the initial approach in developing a disaster recovery strategy?
• Why is it important to log emergency changes in production systems?
• What is a critical component of preparing for potential disasters in IT?
• Who is the most important stakeholder in developing a business continuity plan?
• What is the primary purpose of a disaster recovery plan?
• When reviewing preventive maintenance processes, what is crucial for an IS auditor to ensure?
• In the context of business continuity plans, what is more critical than the integration of all plans?
• How important is having an effective inventory of backup tapes during recovery?
• Which of the following is MOST directly affected by network performance monitoring tools?
• Which of the following best differentiates a business impact analysis from a risk assessment?
• When can emergency changes that bypass normal change control processes be acceptable?
• What is the risk associated with a new vendor not being familiar with organizational policies?
• When auditing an ecommerce architecture, the IS auditor discovers that customer master data is retained on the web server for six months after the transaction date. What is the PRIMARY concern?
• What is an advantage of using unshielded twisted-pair (UTP) cable over other copper-based cables?
• An IS auditor reviewing change management should be MOST concerned when?
• What is the primary goal of service-level management?
• In reviewing continuous monitoring processes, what should an IS auditor primarily focus on?
• What method is best for ensuring that a business continuity plan remains current?
• What type of system testing is typically required for a disaster recovery plan?
• What method should an IS auditor use to determine unauthorized modifications to production programs?
• Which procedure is essential for recovering from a database failure?
• What is the primary focus of a business impact analysis in a disaster recovery context?
• Which criterion is crucial for determining acceptable downtime when developing a disaster recovery plan?
• What is a crucial requirement for ensuring data integrity within a cloud computing environment?
• Integrating the business continuity plan into IT project management aids primarily in what aspect?
• What is the primary risk of not having segregation of duties for change requests?
• To maintain data integrity within a relational database, what key design aspect must be upheld when references are made across tables?
• During an IS audit, which observation regarding local IT resources in remote offices is most critical?
• In the context of a business impact analysis, what should be the main focus?
• Which testing method involves a structured review of the disaster recovery plan to identify weaknesses?
• What strategy should be used for complete recovery of a critical database in a disaster scenario?
• In the case of a verbal agreement between IT and HR departments regarding IT services, what should the IS auditor do first?
• In which scenario is implementing data mirroring as the recovery strategy most appropriate?
• What is the best method for testing program changes in a change management process?
• What should be the GREATEST concern for an IS auditor observing backup processes?
• What is the MOST secure method for updating open-source software?
• Which technology provides real-time data replication for mission-critical applications?
• What is the primary focus of the business continuity plan process?
• What is the consequence of corrupted foreign key values in a transaction table?
• What recommendation should an IS auditor make if a RAID system is installed without offsite backups?
• When implementing a new application, what is a key consideration?
• What should an IS auditor do when noticing that security patches for a mission-critical system have not been installed for two months?
• What is the best method for verifying that the correct version of a data file was used for a production run?
• What is the best method for assessing the effectiveness of a business continuity plan?
• What is the most effective compensating control when tape management parameters are set to bypass tape header records?
• What could be a significant consequence of inadequate management of storage in critical servers?
• What factor should be evaluated to minimize risk when implementing changes to IT systems?
• What can be considered a follow-up measure after finding out-of-range data in a database?
• What verifies that disaster recovery resources are in place for future events?
• Segmenting a highly sensitive database primarily results in what benefit?
• An IS auditor finds that a business continuity plan does not adequately address information confidentiality. What should be recommended?
• Denormalization of a database is most likely to increase the risk of which issue?
• What is the primary objective of business continuity and disaster recovery plans?
• Which of the following is an important consideration when implementing an archiving policy for emails?
• In evaluating network performance, which factor is most likely responsible for degradation observed during business hours?
• Which of the following controls would be MOST effective in ensuring that production source code and object code are synchronized?
• Which approach to change management in IT applications allows for documentation after the fact?
• Which control can provide the best assurance in regards to the management of internal controls for a service provided by a third party?
• What is the most significant concern regarding patch deployment by the IT department without testing?
• The maximum tolerable outage refers to what concept in business continuity planning?
• What should be considered when determining the acceptable time period for the resumption of critical business processes?
• What is the goal of effective business impact analysis?
• What is the primary concern for an IS auditor when reviewing a service level agreement (SLA)?
• What action should be taken if a developer requires full access to production data?
• What should an organization do if their business continuity plan is outdated?
• When is it MOST appropriate to implement an incremental backup scheme?
• When defining recovery point objectives, what is the most important consideration?
• What should the incident response team prioritize after ensuring life safety?
• What is the greatest concern when incidents are assigned incorrect priorities and fail to meet the business service level agreement?
• What is the role of an IS auditor regarding the evaluation of change management processes?
• After conducting a business impact analysis, what is the next step in the business continuity planning process?
• What is the greatest risk when storage growth in a critical file server is not managed properly?
• Which control should an IS auditor recommend for protecting specific sensitive information within a data warehouse?
• What is the potential risk associated with shared accounts for database administrators?
• When developing a business continuity plan, which analytical tool focuses mainly on identifying risks?
• During a disaster recovery test, an auditor notices slow server performance. What should the auditor first review?
• Which indicator best verifies that disaster recovery procedures meet requirements?
• Determining the service delivery objective should be based PRIMARILY on what factor?
• Which document provides assurance of the effectiveness of internal controls used by a third party?
• What is a likely result of a longer recovery time in a disaster recovery plan?
• The activation of a business continuity plan should be based on which of the following?
• In an audit of a network, what concern is paramount when evaluating preventive measures?
• In a disaster recovery situation, which metric is most important for data synchronization between critical systems?
• What should be the focus of an IS auditor conducting a service-level review?
• What is typically done to enhance the availability of a database system?
• When outsourcing the help desk function, which indicator is best to include in the service level agreement?
• In database hardening, what is the most important consideration for an IS auditor?
• Which activity performed by a database administrator should be separated to ensure proper controls?
• In a contract for backup site usage, what consideration is most critical?
• What control should be recommended to prevent out-of-range data occurrences in a database?
• What is the primary purpose of implementing RAID level 1 in a file server?
• During the reconciliation of separate business continuity plans for different departments, what should be addressed first?
• What would be the best contingency plan for a financial institution's central communications processor?
• Which approach should be prioritized for documenting emergency changes?
• When ensuring data availability, real-time transactions are crucial because:
• What type of control should an IS auditor recommend to address issues of corrupt data in a database?
• What is the MAIN purpose for periodically testing offsite disaster recovery facilities?
• Which of the following would an IS auditor consider to be the most important aspect to review during a disaster recovery audit?
• Which contractual term presents the greatest risk when a healthcare organization considers a third-party cloud provider?
• What is the recovery time objective primarily concerned with in a disaster recovery plan?
• What function performed by a database administrator is most concerning to an IS auditor?
• Which test is considered the most cost-effective for an organization with multiple offices developing a disaster recovery plan?
• Which strategy best facilitates the handling of heavy web traffic to prevent downtime?
• When changing database vendors, which area should an IS auditor primarily examine?
• Which control would help prevent the introduction of inaccurate data in a database?
• Which action is crucial for ensuring that business processes can recover effectively after a disaster?
• In case of a corrupted foreign key, what system behavior can typically be expected?
• Who is responsible for authorizing access to a business application system?
• Which factor is considered when identifying the sensitive data that needs to be prioritized in a business continuity plan?
• Which situation is of most concern to an IS auditor during a post-implementation review when code was erroneously included in a production release?
• During an application audit, what should an IS auditor review to ensure database referential integrity?
• When reviewing a business continuity plan, which element requires the most attention?
• Which disaster recovery plan is BEST for a central communications processor in a large chain of shops?
• What is the primary risk of not testing a new disaster recovery plan?
• What is the MAIN criterion for determining the severity level of a service disruption incident?
• What is the best backup strategy for a large database supporting online sales?
• What is a major concern when data is processed in an unregulated manner by end-user applications?
• Which of the following is an appropriate test method to apply to a business continuity plan?
• Which of the following options does NOT primarily ensure data integrity for a data warehouse?
• What is the main purpose of code signing?
• Which type of continuity plan test simulates a system crash using actual resources?
• To minimize data loss, how frequently should backups be performed in relation to recovery point objectives?
• What is the best method to ensure uninterrupted operations in an organization with multiple IT operation centers?
• Which type of site allows for manual processing of sensitive systems in a cost-effective manner over time?
• Which component is critical to include in an effective disaster recovery plan?
• What primary assurance does library control software provide?
• How should organizations ensure that their data backups are effective?
• During an IS compliance audit of an ISP, what is most crucial for the auditor to review?
• A significant aspect of a backup and restore process involves which of the following?