Question 1
An IS auditor is reviewing an organization's business continuity plan (BCP). The Business Impact Analysis (BIA) identifies a critical sales processing system with a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 15 minutes. Which of the following is the MOST appropriate recovery strategy for this system?
Correct Answer:
High-availability system with data replication.
Question 2
What is the PRIMARY output of the Business Impact Analysis (BIA) phase in the business continuity planning process?
Correct Answer:
A prioritization of critical business processes and their recovery time objectives.
Question 3
An organization conducts a business continuity test where key team members gather in a conference room to discuss their roles and responsibilities in response to a simulated disaster scenario presented by a facilitator. Which type of test does this scenario describe?
Correct Answer:
Tabletop exercise
Question 4
During a review of a company's business continuity plan, an IS auditor notes that the plan has not been updated in over three years, despite significant changes in business processes and IT infrastructure. Which of the following is the GREATEST risk associated with this finding?
Correct Answer:
The plan may be ineffective in recovering critical operations after a disruption.
Question 5
Which of the following BEST defines the Recovery Point Objective (RPO)?
Correct Answer:
The maximum amount of data loss an organization can tolerate, measured in time.
Question 1
Exam overview

About this Exam

Prepare with the ISACA CISA Certified Information Systems Auditor Exam practice quiz. This question bank includes 150 questions covering auditor, organization, risk, audit, and management. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

ISACA CISA Certified Information Systems Auditor Exam

This practice set contains 150 questions from the matching question bank and focuses on auditor, organization, risk, audit, and management. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions