CISA Domain 4 Practice Exam

These questions are part of the practice quiz. Start practicing

• What is the most significant concern regarding patch deployment by the IT department without testing?
• What is the purpose of a check digit in accounts payable transaction registers?
• In the business impact analysis, which factor should be identified first?
• What could be a significant consequence of inadequate management of storage in critical servers?
• What is the primary focus of the business continuity plan process?
• What is a critical consideration for providing backups specifically for online systems?
• Which approach enhances the portability of a database-connected application?
• What aspect of business continuity planning does disaster recovery planning specifically address?
• Why is it important to integrate the testing of non-critical systems in disaster recovery plans with business continuity plans?
• What aspect of an organization's disaster recovery plan is likely defined incorrectly if not all critical data is retained?
• Which security measure is most effective in ensuring the integrity of information in a data warehouse?
• When assessing access controls, which area should remain a top priority?
• An auditor notices that an organization frequently changes staff without appropriate documentation. What risk does this pose?
• What is the most effective method for testing the design effectiveness of a change control process?
• What is the primary objective of business continuity and disaster recovery plans?
• When auditing an ecommerce architecture, the IS auditor discovers that customer master data is retained on the web server for six months after the transaction date. What is the PRIMARY concern?
• When ensuring data availability, real-time transactions are crucial because:
• What is the MOST effective method for verifying the correctness of individual account balances after a database migration?
• Which practice is essential to avoid unexpected downtime during maintenance activities?
• What is an advantage of using unshielded twisted-pair (UTP) cable over other copper-based cables?
• Which factor is NOT directly related to RAID level 1 functionality?
• What should be the GREATEST concern for an IS auditor observing backup processes?
• Which recovery strategy is most appropriate for a sensitive system with a high recovery time objective (RTO)?
• What should an IS auditor prioritize when experiencing decreased query performance in a data warehouse?
• When outsourcing the help desk function, which indicator is best to include in the service level agreement?
• When assessing understanding of roles in a business continuity plan, the IS auditor evaluates what?
• When implementing a new application, what is a key consideration?
• Which control provides the GREATEST assurance of database integrity?
• An offsite facility with no computer or communications equipment is classified as a?
• Which technology provides real-time data replication for mission-critical applications?
• During the reconciliation of separate business continuity plans for different departments, what should be addressed first?
• Segmenting a highly sensitive database primarily results in what benefit?
• Which disaster recovery testing technique is considered the most efficient to determine the effectiveness of a plan?
• Which of the following best differentiates a business impact analysis from a risk assessment?
• Which analysis is crucial for prioritizing the recovery of IT assets during disaster recovery planning?
• Which statement best describes the importance of testing a disaster recovery plan?
• What aspect would be most important for the IS auditor to focus on when reviewing the integrity of a database?
• What is a crucial requirement for ensuring data integrity within a cloud computing environment?
• A lower recovery time objective typically results in which of the following?
• Which of the following would BEST help to detect errors in data processing?
• To minimize data loss, how frequently should backups be performed in relation to recovery point objectives?
• How important is having an effective inventory of backup tapes during recovery?
• When multiple plans are developed for business continuity, what must be ensured?
• Which approach to change management in IT applications allows for documentation after the fact?
• What major risk arises from an undefined point at which a situation is declared a crisis in a business continuity plan?
• Which testing method involves a structured review of the disaster recovery plan to identify weaknesses?
• What would be the best contingency plan for a financial institution's central communications processor?
• What control is essential for accountability in production database updates?
• What should be a primary focus of an IS auditor reviewing a disaster recovery plan?
• What factor is critical in selecting a third-party vendor for backup storage services?
• During an assessment of software development practices, what is the GREATEST concern regarding the use of open source software?
• Why is having a cold site considered advantageous for disaster recovery?
• What is the best recommendation when notification systems could be impacted during a business continuity simulation?
• The objective of concurrency control in a database system is to:
• Which type of site allows for manual processing of sensitive systems in a cost-effective manner over time?
• Which activity performed by a database administrator should be separated to ensure proper controls?
• Which type of site is characterized by having immediate hardware availability but is more expensive to maintain?
• If a business process has a recovery time objective equal to zero, what does this imply?
• Why is it important to log emergency changes in production systems?
• In a disaster recovery situation, which metric is most important for data synchronization between critical systems?
• A hot site should be implemented as a recovery strategy when:
• Which technology best supports 24/7 availability for critical systems?
• What is the main purpose of code signing?
• Which statement best describes the importance of backup intervals for an organization’s disaster recovery requirements?
• What is a common challenge for establishing responsibility and reporting lines during audits of automated systems?
• In a relational database with referential integrity, which key prevents the deletion of a row from a customer table while referencing it in orders?
• What role does periodic testing of a disaster recovery plan fulfill?
• For multiple applications hosted on the same server, what determines the recovery time objective (RTO) for that server?
• What is the best backup strategy for a large database supporting online sales?
• When reviewing an organization's disaster recovery plan, what should an IS auditor primarily verify?
• What must be established for an organization's disaster recovery plan to effectively address system prioritization following a disaster?
• For a duplicate information processing facility to be viable, which criterion must be met?
• What is a critical component of preparing for potential disasters in IT?
• What is vital for maintaining the integrity of a production environment?
• What should an IS auditor do if they find that some tables in a database are not normalized?
• What should be considered when determining the acceptable time period for the resumption of critical business processes?
• Which area of operations is considered to have the HIGHEST risk when setting up a new overseas database?
• What is the impact of a lower recovery time objective on recovery strategies?
• What is the primary purpose of implementing RAID level 1 in a file server?
• Which of the following represents the GREATEST risk created by a reciprocal agreement for disaster recovery made between two companies?
• What is the greatest concern for an IS auditor after a change in the maintenance vendor for critical systems?
• How should organizations ensure that their data backups are effective?
• Denormalizing some database tables typically results in which of the following?
• What verifies that disaster recovery resources are in place for future events?
• Which disaster recovery plan is BEST for a central communications processor in a large chain of shops?
• In a scenario where a production batch job failed after modifications post-user acceptance testing, which control is most effective to prevent future risks?
• What is the significance of exception reporting in problem management mechanisms?
• What should be the focus of a disaster recovery plan concerning hardware resources?
• Which control mechanism BEST helps reduce research time for investigating exceptions in data file change management?
• What is the primary purpose of an IT manager monitoring technical capacity?
• Why is it important to monitor downtime reports generated internally by an enterprise?
• What is the best method for assessing the effectiveness of a business continuity plan?
• In evaluating network performance, which factor is most likely responsible for degradation observed during business hours?
• What is the primary reason an organization would use emergency change control for an application?
• What is a major concern when data is processed in an unregulated manner by end-user applications?
• In reviewing continuous monitoring processes, what should an IS auditor primarily focus on?
• In the context of a business impact analysis, what should be the main focus?
• When defining recovery point objectives, what is the most important consideration?
• What is the most effective compensating control when tape management parameters are set to bypass tape header records?
• When is it MOST appropriate to implement an incremental backup scheme?
• What is the GREATEST concern for an IS auditor reviewing an in-house developed application?
• What method best ensures users have uninterrupted access to a heavily-used web application?
• During an IS audit, which observation regarding local IT resources in remote offices is most critical?
• What control should be recommended to prevent out-of-range data occurrences in a database?
• Which of the following is an appropriate test method to apply to a business continuity plan?
• Which aspect is vital to the effectiveness of a disaster recovery plan?
• What is the MAIN criterion for determining the severity level of a service disruption incident?
• The maximum tolerable outage refers to what concept in business continuity planning?
• What should an organization do if their business continuity plan is outdated?
• What primary assurance does library control software provide?
• What is the primary goal of service-level management?
• Which tool should be used to understand an organization’s business processes while developing a business continuity plan?
• What is the best approach to prevent critical IT system failures from recurring?
• What is the MOST effective method for disposing of magnetic media that contains confidential information?
• Which control would help prevent the introduction of inaccurate data in a database?
• What type of control should an IS auditor recommend to address issues of corrupt data in a database?
• The activation of a business continuity plan should be based on which of the following?
• What does a deskcheck test primarily serve to ensure?
• When hiring a service provider, which item must be emphasized in the assessment process?
• A significant aspect of a backup and restore process involves which of the following?
• What should be done after a disaster to ensure recovery objectives have been met?
• What is the goal of an optimized disaster recovery plan?
• In an audit of a network, what concern is paramount when evaluating preventive measures?
• Which of the following signifies a risk when assessing an SLA for a cloud service provider?
• What is the GREATEST advantage of using web services for information exchange between systems?
• Which recovery plan scenario provides the best protection for critical applications during a disaster?
• After completing an annual risk assessment, what should an IS auditor recommend for the business continuity plan?
• What is the primary purpose of a disaster recovery plan?
• Which aspect is most concerning during an audit of a third-party application?
• What is the primary focus of network monitoring tools in terms of network performance?
• Denormalization of a database is most likely to increase the risk of which issue?
• Which option is the most reasonable for recovering a non-critical system?
• How does a robust acceptable use policy affect user behavior regarding unauthorized software?
• What process should be reviewed by an IS auditor to ensure that security patch installations do not lead to system crashes in the future?
• What is the best method to ensure uninterrupted operations in an organization with multiple IT operation centers?
• What is a detective control that does not ensure the integrity of data in a database?
• During an audit, what should be the primary concern regarding system parameters?
• Which of the following is widely accepted as one of the critical components in network management?
• Which control should an IS auditor recommend for protecting specific sensitive information within a data warehouse?
• During an IT disaster recovery test, what issue should be of greatest concern to the IS auditor?
• In an IT disaster recovery plan, what should the IS auditor primarily ensure is covered?
• What is the initial step an IS auditor should take when reviewing a business continuity plan's crisis declaration process?
• Integrating the business continuity plan into IT project management aids primarily in what aspect?
• What is the primary focus of a business impact analysis in a disaster recovery context?
• When developing a business continuity plan, which analytical tool focuses mainly on identifying risks?
• What is the greatest concern when incidents are assigned incorrect priorities and fail to meet the business service level agreement?
• If a database is restored using before-image dumps, where should the process begin following an interruption?
• Which of the following is MOST directly affected by network performance monitoring tools?
• What is the best control an IS auditor can recommend to monitor availability in a SaaS model?
• What is the key benefit of a well-defined security policy?
• A company with a 72-hour recovery time objective and a 24-hour recovery point objective would most effectively be served by what type of site?
• What is the best indicator of the effectiveness of backup and restore procedures after a disaster?
• An IS auditor finds that a business continuity plan does not adequately address information confidentiality. What should be recommended?
• When examining the security configuration of an operating system, an IS auditor should review:
• Which situation is of most concern to an IS auditor during a post-implementation review when code was erroneously included in a production release?
• What should an IS auditor do when they notice continuous addition of storage resources in IT infrastructure?
• In evaluating programmed controls over password management, which of the following would the IS auditor MOST likely rely on?
• In the context of disaster recovery, what refers to the maximum amount of time that an organization can tolerate its operations being unavailable?
• In disaster recovery, what does an organization need to assess for their recovery point objective?
• During an application audit, what should an IS auditor review to ensure database referential integrity?
• What should be the focus of an IS auditor conducting a service-level review?
• What recommendation should an IS auditor make if a RAID system is installed without offsite backups?
• Which document provides assurance of the effectiveness of internal controls used by a third party?
• What is a key goal of a functional test in business continuity planning?
• When designing emergency change control procedures, how can accountability for system support personnel be best ensured?
• What strategy should be used for complete recovery of a critical database in a disaster scenario?
• What is a prevalent risk associated with the development of end-user computing applications?
• Vendors have released patches fixing security flaws in their software. What should an IS auditor recommend in this situation?
• When designing a business continuity plan for an airline reservation system, which data transfer method is most appropriate for backup at an offsite location?
• Which factor is considered when identifying the sensitive data that needs to be prioritized in a business continuity plan?
• Which criterion is crucial for determining acceptable downtime when developing a disaster recovery plan?
• When auditing the onsite archiving process of emails, the IS auditor should pay the MOST attention to:
• What method of routing traffic through split-cable facilities is referred to as?
• What should the incident response team prioritize after ensuring life safety?
• What should an IS auditor recommend to optimize a business continuity plan?
• Which of the following controls would be MOST effective in ensuring that production source code and object code are synchronized?
• What control should an IS auditor recommend to avoid out-of-range data in a database?
• What is a secondary objective of a business continuity and disaster recovery plan?
• In the context of business continuity plans, what is more critical than the integration of all plans?
• What constitutes the GREATEST exposure during a database server audit?
• If a live test of business continuity efforts reveals that workflows are not functioning as expected, which action is most recommended?
• What is typically done to enhance the availability of a database system?
• Which strategy best facilitates the handling of heavy web traffic to prevent downtime?
• Which of the following indicates a necessity for monitoring disaster recovery procedures?
• Understanding which of the following is critical for maintaining compliance with internal service levels?
• To ensure the availability of transactions in the event of a disaster, what method should be utilized?
• During an IS compliance audit of an ISP, what is most crucial for the auditor to review?
• What is the most effective control for enforcing accountability among users accessing sensitive database information?
• What is the MOST secure method for updating open-source software?
• When reviewing preventive maintenance processes, what is crucial for an IS auditor to ensure?
• When changing database vendors, which area should an IS auditor primarily examine?
• Which type of testing is essential before finalizing a software application upgrade?
• Which of the following would an IS auditor consider to be the most important aspect to review during a disaster recovery audit?
• Which approval is most important for ensuring system resources for a disaster recovery plan?
• Which element is NOT essential for an effective disaster recovery strategy?
• Which type of continuity plan test simulates a system crash using actual resources?
• What aspect is primarily influenced by identifying critical processes during a business impact analysis?
• What is a MAJOR concern during a review of help desk activities?
• What is the initial approach in developing a disaster recovery strategy?
• Which process is most effective in reducing the risk of unauthorized software being distributed to a production server?
• Which report is most suitable for an IS auditor to verify compliance with a service level agreement by an ISP?
• Which aspect is crucial for data backup in case of business disruptions?
• In a business continuity audit, which aspect is MOST important to verify?
• If an IS auditor discovers that a disaster recovery plan does not include a cloud-hosted application, what should be the auditor's next course of action?
• The media creation date at a warm recovery site is primarily based on which criterion?
• Which activity during peak production hours is likely to cause unexpected downtime?
• Determining the service delivery objective should be based PRIMARILY on what factor?
• Which factor would contribute most to an effective business continuity plan?
• What is the most critical element for effectively executing a disaster recovery plan?
• What is the greatest concern an IS auditor should have during a review of a disaster recovery hot site?
• What is a key factor in confirming disaster recovery procedures are adequate?
• What is the goal of effective business impact analysis?
• In a business impact analysis, what should be the goal when developing strategies for business continuity?
• An IS auditor evaluating high-availability networks should be most concerned if:
• What is the primary concern for an IS auditor when reviewing a service level agreement (SLA)?
• If the change management process in a production system fails and lacks documentation, what should the IS auditor do next?
• What is the next recommended testing step for an organization that has developed a new business continuity plan after conducting a basic tabletop exercise?
• What should an IS auditor focus on the most when assessing a service level agreement (SLA) with an outsourced service provider?
• Which component is critical to include in an effective disaster recovery plan?
• Which of the following options does NOT primarily ensure data integrity for a data warehouse?
• What control would BEST mitigate the risk of unauthorized program changes in a production environment?
• Which of the following backup techniques is the most appropriate for extremely granular data restore points?
• What is the best way to mitigate the risk of losing irreplaceable backup media during transit?
• What is the primary assurance gained from a live test of a mutual agreement for IT system recovery?
• When selecting a location for an offsite storage facility for IS backup files, what is the most important criterion?
• What approach should an organization take when administrators request to reduce testing of critical security patches?
• Which audit procedure is best for detecting unauthorized changes to production code?
• During a fire alarm in a data center, what is the most important action for the staff?
• What is the greatest risk associated with reciprocal agreements for disaster recovery between two business units?
• In relation to database management, what does "durability" guarantee?
• In disaster recovery planning, what should be the primary focus for early recovery?
• What would be considered an adequate set of compensating controls for changes made to a database after normal hours?
• What is the MOST critical factor affecting the quality of data in a data warehouse?
• What is a good compensating control for a developer with full access to production data?
• From an audit perspective, what is the most critical document to review when engaging a new IT service provider?
• What is the primary risk of not testing a new disaster recovery plan?
• If the recovery time objective increases, what else increases?
• What is the best method for testing program changes in a change management process?
• Which factor should NOT be prioritized in a disaster recovery strategy regarding cost considerations?
• An IS auditor reviewing change management should be MOST concerned when?
• Which of the following methods can BEST help manage the recording of changes to a database?
• What is the primary objective of testing a business continuity plan?
• What should an IS auditor recommend if a new application patch is available but deemed unnecessary?
• What does applying a retention date on a file ensure?
• If a hard disk containing confidential data is damaged beyond repair, what is the most effective action to take before discarding it?
• When verifying a change management process after a server crash, an auditor's review should focus on:
• Which clause is most concerning for an IS auditor when reviewing an outsourcing contract?
• What is the best audit recommendation for an IS auditor if DBAs can purge logs from the database server?
• Which method is best to mitigate risks related to emergency changes directly to production in a small organization?
• In which scenario is implementing data mirroring as the recovery strategy most appropriate?
• What can be concluded if an IS auditor finds frequent changes to a network without documentation?
• Which procedure is essential for recovering from a database failure?
• What method should an IS auditor use to determine unauthorized modifications to production programs?
• Which risk treatment approach is applied when organizations have reciprocal disaster recovery agreements?
• Which report should an IS auditor check to ensure compliance with a service level agreement's uptime requirement?
• What is the greatest risk when storage growth in a critical file server is not managed properly?
• What transaction processing feature is violated if a database transaction is partially executed and not rolled back?
• After conducting a business impact analysis, what is the next step in the business continuity planning process?
• What method MOST likely ensures the success of disaster recovery efforts?
• What can be considered a follow-up measure after finding out-of-range data in a database?
• What aspect of capacity monitoring is MOST essential according to continuous IT resource monitoring?
• What is the impact of utilizing offsite storage in disaster recovery plans?
• What is the potential risk associated with shared accounts for database administrators?
• What is the primary goal of implementing a disaster recovery plan in an organization?
• What is most important when applying an operating system patch in a production environment?
• What is an important focus for an IS auditor when reviewing the log of program changes during an application maintenance audit?
• Who is the most important stakeholder in developing a business continuity plan?
• What is the primary goal of a business impact analysis in the recovery planning process?
• What type of system testing is typically required for a disaster recovery plan?
• Who is responsible for authorizing access to a business application system?
• Which of the following is a crucial step in updating a business continuity plan?
• Which approach should be prioritized for documenting emergency changes?
• What is a key aspect of a successful change management process?
• Which observation during a test comparing job run logs to computer job schedules would be of GREATEST concern to an IS auditor?
• What should an IS auditor evaluate to ensure personnel are aware of their emergency roles?
• What is one key outcome of an effective incident management process related to service level agreements?
• Which indicator best verifies that disaster recovery procedures meet requirements?
• What is the first step in the execution of a problem management mechanism?
• Which contractual term presents the greatest risk when a healthcare organization considers a third-party cloud provider?
• Which control is MOST effective in ensuring that an unauthorized interest rate change is not processed?
• An IS auditor needs to review the procedures used to restore a software application to its state prior to an upgrade. Which procedure should the auditor assess?
• Which clause regarding the right to audit in an outsourcing contract is vital for oversight?
• What is the primary risk of not having segregation of duties for change requests?
• What should an IS auditor do when noticing that security patches for a mission-critical system have not been installed for two months?
• What factor is critical when determining the authorization of program changes in application maintenance?
• What is the best method to ensure that incident response activities are aligned with business continuity requirements?
• After completing a business impact analysis, what is the next step in business continuity planning?
• What should an auditor recommend regarding system performance concerns expressed by business units?
• What is the primary purpose of using data flow diagrams by IS auditors?
• Why is supervisory approval important in managing privileged accounts?
• What is a key reason for having protocols and procedures in place for patch management?
• Recovery procedures for an information processing facility are best based on which objective?
• How should an IS auditor handle a situation where the effectiveness of a business continuity plan is being tested?
• What is the primary method to ensure the integrity of transaction processing in a database?
• Which aspect should an IS auditor be most concerned about when reviewing a business continuity plan?
• What task should be performed first when preparing a disaster recovery plan?
• What is the risk associated with a new vendor not being familiar with organizational policies?
• What is the most critical factor in determining the recovery point objective for a key enterprise process?
• In what context are performance issues most critical when reviewing a system?
• What is essential for conducting an effective review of a database?
• To ensure structured disaster recovery, which is the most important aspect of a business continuity plan?
• Which of the following is an important consideration when implementing an archiving policy for emails?
• If an IS auditor finds that some hard drives were not sanitized before disposal, what should be the auditor's first step?
• What should the IS auditor review to ensure servers are optimally configured for processing requirements?
• In the case of a verbal agreement between IT and HR departments regarding IT services, what should the IS auditor do first?
• Who is primarily responsible for authorizing access to application data?
• What is the role of an IS auditor regarding the evaluation of change management processes?
• Which type of business continuity plan test focuses on proper coordination among crisis management team members?
• Which of the following is a network diagnostic tool that monitors and records network information?
• What is the best method for determining the criticality of each application system in a production environment?
• To best detect malicious activity from a programmer who modified and restored production code, which procedure should be employed?
• For effective implementation of a business continuity plan, what is most important?
• Which control can provide the best assurance in regards to the management of internal controls for a service provided by a third party?
• What is the most effective method for an IS auditor to determine compliance with change control procedures?
• Which approach BEST mitigates risks from using reciprocal agreements as a recovery strategy?
• How should an IS auditor address long login times during peak hours?
• Which disaster recovery solution is most cost-effective for a financial system with a zero recovery point objective and a 72-hour recovery time objective?
• After hardware replacement at the primary facility, what should the business continuity manager do first?
• In case of emergency changes to a database after normal working hours, how should a database administrator (DBA) log in?
• What is the most appropriate recommendation for an IS auditor discovering personal software installations on users' PCs, where the policy lacks explicit prohibition?
• What action should be taken if a developer requires full access to production data?
• What is a major concern for an IS auditor reviewing a business continuity plan?
• What is the most suitable recovery strategy for a business with multiple offices and a restricted recovery budget?
• In a contract for backup site usage, what consideration is most critical?
• What effect does implementing a disaster recovery plan (DRP) generally have on the costs of ongoing operations?
• In what scenario is it ideal to use a differential backup instead of an incremental backup?
• What is a primary concern when integrating multiple BCPs from different departments?
• Which factor is least likely to influence the effectiveness of a business continuity plan?
• When assessing a hardware maintenance program, which aspect should an IS auditor validate?
• Which backup strategy is most efficient for large quantities of mission-critical data in a continuous operation environment?
• What provides evidence of potential limitations in a business continuity plan?
• When can emergency changes that bypass normal change control processes be acceptable?
• What is the primary purpose of a business impact analysis?
• What presents the greatest risk when reviewing a disaster recovery plan that was implemented correctly but has concerns?
• Which control is the most important for ensuring system availability during a change management process?
• Which of the following BEST helps to define disaster recovery strategies?
• To maintain data integrity within a relational database, what key design aspect must be upheld when references are made across tables?
• What is a likely result of a longer recovery time in a disaster recovery plan?
• Which process is recommended for recording baselines for software releases?
• What factor should be evaluated to minimize risk when implementing changes to IT systems?
• What is a limitation of relying solely on the incident response plan for managing security incidents?
• Which is a critical aspect of managing configuration changes in software applications?
• Which control would best resolve unauthorized system data changes while maintaining business operations?
• Which test is considered the most cost-effective for an organization with multiple offices developing a disaster recovery plan?
• What is the most effective method for an IS auditor to ensure that production servers have the latest security updates?
• What is the primary factor in designing a data backup strategy for natural disasters?
• What is the recovery time objective primarily concerned with in a disaster recovery plan?
• In case of a corrupted foreign key, what system behavior can typically be expected?
• Which statement is true regarding the relationship between downtime costs and the recovery time objective?
• What method is best for ensuring that a business continuity plan remains current?
• Which action is crucial for ensuring that business processes can recover effectively after a disaster?
• What ensures accountability when updating data in a production database?
• What does integrity constraints in a database specifically prevent?
• What provides the best evidence of an organization's disaster recovery capability readiness?
• When an IS auditor suspects unlicensed software usage, what should be the auditor's first action?
• What should an IS auditor do if they find that a database administrator has read and write access to production data?
• How can an IS auditor verify that a business continuity plan (BCP) is effective?
• What is the most significant concern for an IS auditor reviewing the compliance of installed software within an organization?
• Which practice is least effective when managing system updates?
• In database hardening, what is the most important consideration for an IS auditor?
• What is the MAIN purpose for periodically testing offsite disaster recovery facilities?
• What is the best method for verifying that the correct version of a data file was used for a production run?
• During a disaster recovery test, an auditor notices slow server performance. What should the auditor first review?
• What major concern arises when disaster recovery strategies are modified?
• After a major incident, what should an incident response team address first in an information processing facility?
• When analyzing database transaction logs, which outcome indicates a violation of atomicity?
• What aspect should an IS auditor be most concerned with when reviewing a disaster recovery plan?
• Who is the best source of information for determining the criticality of application systems in a business impact analysis?
• What function performed by a database administrator is most concerning to an IS auditor?
• What is the best control to limit risk when using privileged accounts for configuration changes?
• Which of the following is crucial for defining recovery strategies after a disaster declaration?
• When reviewing a business continuity plan, which element requires the most attention?
• What is the consequence of corrupted foreign key values in a transaction table?
• Which database control helps maintain transaction integrity in an online transaction processing system?
• To evaluate a preventive computer maintenance program effectively, what should an IS auditor consider most helpful?
• To avoid crashes in production servers after installing a security patch, what should an IS auditor ensure?
• What is a significant risk concerning disaster recovery plans regarding untested DRPs?
• What should the IS auditor recommend if the IS director has superuser-privilege access for role changes?