A hospital's electronic health record (EHR) system must be recoverable with no more than 15 minutes of data loss and must be back online within 2 hours of a failure. The system is hosted on-premises. Which backup strategy BEST meets these requirements?

Differential backups every 15 minutes to off-site storage

Continuous data protection (CDP) replicating to an off-site location

Incremental backups every 15 minutes to local disk

Full backup nightly with off-site storage

A mid-sized e-commerce company has an RTO of 4 hours and an RPO of 1 hour for its order processing system. The company has a limited budget and cannot afford a fully mirrored hot site. Which disaster recovery site strategy is MOST appropriate?

Mobile site with portable generators

Warm site with replicated data and pre-configured servers

Cold site with hardware delivered within 24 hours

Hot site with real-time data replication

Which of the following is a key step in implementing a Disaster Recovery Plan (DRP)?

Designing the network architecture

Performing a business impact analysis

Allocating resources and assigning team roles

Conducting employee performance reviews

A financial institution has a critical trading system with an RTO of 30 minutes and an RPO of 5 minutes. The institution is considering a warm site with data replication every 15 minutes. Which of the following is the MOST significant risk with this approach?

The RPO of 15 minutes exceeds the required RPO of 5 minutes

The warm site may not have sufficient hardware to meet the RTO

The warm site cannot be tested without disrupting production

The warm site is too expensive for the institution's budget

What is the primary purpose of a Business Impact Analysis (BIA) in the context of business continuity planning?

To document the technical steps for restoring IT systems after a disaster

To assign specific recovery teams and their roles during an incident

To identify and prioritize critical business processes and their recovery requirements

To test the effectiveness of backup and restoration procedures

Certified Information Systems Auditor

Domain 4Objective 2

Business Resilience and Continuity CISA Practice Questions (Page 6)

Part of the Information Systems Operations and Business Resilience domain, which accounts for 26% of the CISA exam.

36questions here

8free pages

10concepts

26%of the exam

Questions 26–30

26application · medium
A hospital's electronic health record (EHR) system must be recoverable with no more than 15 minutes of data loss and must be back online within 2 hours of a failure. The system is hosted on-premises. Which backup strategy BEST meets these requirements?
Select an answer first
27application · medium
A mid-sized e-commerce company has an RTO of 4 hours and an RPO of 1 hour for its order processing system. The company has a limited budget and cannot afford a fully mirrored hot site. Which disaster recovery site strategy is MOST appropriate?
Select an answer first
28foundation · easy
Which of the following is a key step in implementing a Disaster Recovery Plan (DRP)?
Select an answer first
29expert · hard
A financial institution has a critical trading system with an RTO of 30 minutes and an RPO of 5 minutes. The institution is considering a warm site with data replication every 15 minutes. Which of the following is the MOST significant risk with this approach?
Select an answer first
30foundation · easy
What is the primary purpose of a Business Impact Analysis (BIA) in the context of business continuity planning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.