CISA Domain 4B-5 Practice Test 002

This practice test covers Domain 4 (Information Systems Operations & Business Resilience) Subdomain B-5 (Disaster Recovery Plans) from the CISA exam content outline.

These questions are inspired by the ISACA CISA exam and are designed to help you test your knowledge of information systems auditing, governance, risk management, IT operations, business resilience, and information asset protection.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the audit judgment, control evaluation, and risk-based decision-making skills tested in the CISA exam.

Note: CISA and Certified Information Systems Auditor are registered trademarks of ISACA. This content is not affiliated with or endorsed by ISACA.

To choose CISA practice tests based on specific domains and subdomains, click that link.

CISA 4B-5 Disaster Recovery Plans Practice Test 002

10 questions • Single best answer

Question 1

A cloud migration review at an online retailer finds that order processing now runs in a single public cloud region, while the disaster recovery plan still references failover to the company's former on-premises data center. The plan was approved by IT leadership last quarter without changes. What should the IS auditor do FIRST?

A. Recommend replicating the order workloads to a second cloud region immediately B. Determine whether current recovery capabilities can meet the approved RTOs C. Request that IT leadership reapprove the plan after updating site references D. Schedule a full interruption test of the cloud-based order platform

Question 2

A state benefits agency relies on a managed service provider to host its eligibility system and recover it at the provider's secondary site. The contract specifies a four-hour RTO, and the agency's DR plan depends on that commitment. Which of the following provides the IS auditor the BEST evidence that the provider can meet it?

A. The signed contract, including service credits for missed recovery time targets B. The provider's documented DR procedures and alternate site specifications C. A management attestation from the provider's chief operating officer D. Recent recovery test results for the agency's system, witnessed by agency staff

Question 3

An internal audit team at a hospital network is reviewing the disaster recovery plan for its electronic health record system. The team notes several gaps after walkthroughs with IT operations staff and a review of the most recent tabletop exercise results. Which of the following findings is MOST significant?

A. Recovery procedures assume access to an authentication server hosted only at the primary site B. Contact details for two recovery team members include outdated mobile numbers C. The tabletop exercise was facilitated by IT staff rather than an independent party D. Recovery priorities for nonclinical reporting applications were not reviewed during this year's cycle

Question 4

A manufacturing company has completed tabletop walkthroughs of its newly written disaster recovery plan, and management now wants to move directly to a full interruption test of its plant-scheduling system next month. The production schedule cannot tolerate unplanned downtime. What is the IS auditor's BEST recommendation?

A. Proceed with the full interruption test to obtain the most realistic assurance B. Repeat the tabletop walkthroughs until all participants pass a knowledge check C. Conduct a parallel or simulation test before attempting a full interruption test D. Replace testing with a detailed review of the plan by an external consultant

Question 5

A financial services firm's disaster recovery plan was drafted entirely by the infrastructure team, which also set recovery time objectives for each application based on technical complexity. Business unit leaders have not reviewed the plan. Which of the following is the IS auditor's MOST appropriate recommendation?

A. Have business process owners validate recovery objectives based on a business impact analysis B. Have the infrastructure team document the technical basis for each recovery objective C. Have the CIO formally approve the plan and its recovery objectives for the business D. Have the risk management function benchmark recovery objectives against comparable industry peers

Question 6

A county government's disaster recovery plan relies on a reciprocal agreement with a neighboring county to host its tax collection systems during an outage. The agreement has been in place for six years and has never been tested. Which of the following is the IS auditor's GREATEST concern?

A. The agreement may not be legally enforceable without a formal contract B. Staff at the neighboring county may lack training on the tax applications C. Recovery costs may not be allocated fairly between the two counties D. The partner's hardware and capacity may no longer support the county's systems

Question 7

During follow-up on a prior audit, an IS auditor at a logistics company confirms that management updated the disaster recovery plan to address all previously reported findings. However, no recovery test has been performed since the updates were made, and the next test is scheduled in nine months. What should the IS auditor do NEXT?

A. Close the findings because the documented plan now addresses each issue B. Report that remediation cannot be validated until the updated plan is tested C. Perform the recovery test personally to validate the updated recovery procedures D. Reopen the original audit and reissue the report with revised ratings

Question 8

An IS auditor at a telecommunications provider finds that three new customer-facing applications went into production over the past year, but none appears in the disaster recovery plan. The DR coordinator says updates occur only during the annual plan review. Which control would BEST address the root cause?

A. Increasing the frequency of the DR plan review from annual to quarterly B. Requiring the DR coordinator to attest annually that the plan is complete C. Including DR plan updates as a required step in the change management process D. Assigning an analyst to reconcile production applications to the plan each month

Question 9

A disaster recovery test at a pharmaceutical distributor restored the warehouse management system within its RTO. However, the test team used a recovery checklist from the lead engineer's personal notes because the documented procedures were missing several steps. Which conclusion is MOST appropriate based on these results?

A. The test was successful because the RTO was achieved for the system B. The test was invalid and must be repeated using an independent test team C. Recovery capability is adequate, and the engineer's notes should be retained as a reference D. Recovery relies on key-person knowledge, so the plan is not reliably executable

Question 10

An IS auditor is planning a disaster recovery audit for a government transportation agency with more than 200 applications. The audit budget allows detailed review of recovery arrangements for only a limited number of systems. Which approach is MOST appropriate for selecting systems to review in this engagement?

A. Focus on systems the BIA rates as most critical with the shortest recovery objectives B. Select a statistical random sample so that results can be projected to all systems C. Prioritize systems that experienced the most incidents during the past fiscal year D. Review the systems whose configurations changed most significantly since the last DR test

Related Posts

Leave a Comment Cancel Reply