During a DRP activation, the IT team discovers that the alternate site's servers are not configured with the latest security patches, and the network firewall rules are outdated. The BCP coordinator must decide whether to proceed with recovery. Which of the following is the MOST appropriate action?

Proceed with recovery but isolate the alternate site from the network

Declare the DRP a failure and return to the primary site

Proceed with recovery and apply patches after systems are restored

Delay recovery until the alternate site is fully patched and firewall rules are updated

A company's BCP includes a detailed communication plan, but during a recent activation, the crisis management team could not be reached because the primary communication channel (email) was down. Which of the following is the MOST appropriate improvement?

Designate a single person to be responsible for all communications

Remove the communication plan from the BCP because it is unreliable

Add a secondary communication channel, such as SMS or a dedicated phone line, to the BCP

Rely on employees to check the company website for updates

What is the primary purpose of coordinating the Disaster Recovery Plan (DRP) with the Business Continuity Plan (BCP)?

To reduce the total cost of ownership of IT systems

To assign a single team to handle all incidents

To eliminate the need for separate testing of each plan

To ensure that IT recovery aligns with the recovery priorities of critical business processes

What is the purpose of the activation procedures in a Business Continuity Plan (BCP)?

To document the results of previous tests

To define when and how the BCP is initiated in response to a disruption

To list all hardware and software assets

To provide a detailed budget for continuity operations

Why should a Business Continuity Plan (BCP) be reviewed and updated regularly?

To ensure the plan remains current with organizational changes and lessons learned from tests

To comply with software vendor requirements

To reduce the number of employees required for recovery

To eliminate the need for future testing

Certified Information Systems Auditor

Domain 4Objective 2

Business Resilience and Continuity CISA Practice Questions (Page 7)

Part of the Information Systems Operations and Business Resilience domain, which accounts for 26% of the CISA exam.

36questions here

8free pages

10concepts

26%of the exam

Questions 31–35

31expert · hard
During a DRP activation, the IT team discovers that the alternate site's servers are not configured with the latest security patches, and the network firewall rules are outdated. The BCP coordinator must decide whether to proceed with recovery. Which of the following is the MOST appropriate action?
Select an answer first
32expert · hard
A company's BCP includes a detailed communication plan, but during a recent activation, the crisis management team could not be reached because the primary communication channel (email) was down. Which of the following is the MOST appropriate improvement?
Select an answer first
33foundation · easy
What is the primary purpose of coordinating the Disaster Recovery Plan (DRP) with the Business Continuity Plan (BCP)?
Select an answer first
34foundation · easy
What is the purpose of the activation procedures in a Business Continuity Plan (BCP)?
Select an answer first
35foundation · easy
Why should a Business Continuity Plan (BCP) be reviewed and updated regularly?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.