1 | P a g e | © copyright 2024/2025 | Grade A+
CISA Questions (901-1000) Questions &
100% Correct Answers
A company with a limited budget has a recovery time objective (RTO) of 72 hours
and a recovery point objective (RPO) of 24 hours. Which of the following would
BEST meet the requirements of the business?
Select an answer:
A.
A hot site
B.
A cold site
C.
A mirrored site
D.
A warm site
✓ :~~ You are correct, the answer is D.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. Although a hot site enables the business to meets its recovery point objective
(RPO) and recovery time objective (RTO), the cost to maintain a hot site is more
than the cost to maintain a warm site, which could also meet the objectives.
B. A cold site, although providing basic infrastructure, lacks the required hardware
to meet the business objectives.
C. A mirrored site provides fully redundant facilities with real-time data
replication. It can meet the business objectives, but it is not as cost-effective a
solution as a warm site.
D. A warm site is the most appropriate solution because it provides basic
infrastructure and most of the required IT equipment to affordably meet the
business requirements. The remainder of the equipment needed can be provided
through vendor agreements within a few days. The RTO is the amount of time
allowed for the recovery of a business function or resource after a disaster occurs.
The RPO is determined based on the acceptable data loss in case of a disruption of
operations. The RPO indicates the earliest point in time that is acceptable to
recover the data, and it effectively quantifies the permissible amount of data loss
in case of interruption.
An IS auditor finds that database administrators (DBAs) have access to the log
location on the database server and the ability to purge logs from the system.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
What is the BEST audit recommendation to ensure that DBA activity is effectively
monitored?
Select an answer:
A.
Change permissions to prevent DBAs from purging logs.
B.
Forward database logs to a centralized log server.
C.
Require that critical changes to the database are formally approved.
D.
Back up database logs to tape.
✓ :~~ You are correct, the answer is B.
A. Changing the database administrator (DBA) permissions to prevent DBAs from
purging logs may not be feasible and does not adequately protect the availability
and integrity of the database logs.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
B. To protect the availability and integrity of the database logs, it is most feasible
to forward the database logs to a centralized log server to which the DBAs do not
have access.
C. Requiring that critical changes to the database are formally approved does not
adequately protect the availability and integrity of the database logs.
D. Backing up database logs to tape does not adequately protect the availability
and integrity of the database logs.
Which of the following is MOST important to determine the recovery point
objective (RPO) for a critical process in an enterprise?
Select an answer:
A.
Number of hours of acceptable downtime
B.
Total cost of recovering critical systems
C.
Master01 | September, 2024/2025 | Latest update
CISA Questions (901-1000) Questions &
100% Correct Answers
A company with a limited budget has a recovery time objective (RTO) of 72 hours
and a recovery point objective (RPO) of 24 hours. Which of the following would
BEST meet the requirements of the business?
Select an answer:
A.
A hot site
B.
A cold site
C.
A mirrored site
D.
A warm site
✓ :~~ You are correct, the answer is D.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. Although a hot site enables the business to meets its recovery point objective
(RPO) and recovery time objective (RTO), the cost to maintain a hot site is more
than the cost to maintain a warm site, which could also meet the objectives.
B. A cold site, although providing basic infrastructure, lacks the required hardware
to meet the business objectives.
C. A mirrored site provides fully redundant facilities with real-time data
replication. It can meet the business objectives, but it is not as cost-effective a
solution as a warm site.
D. A warm site is the most appropriate solution because it provides basic
infrastructure and most of the required IT equipment to affordably meet the
business requirements. The remainder of the equipment needed can be provided
through vendor agreements within a few days. The RTO is the amount of time
allowed for the recovery of a business function or resource after a disaster occurs.
The RPO is determined based on the acceptable data loss in case of a disruption of
operations. The RPO indicates the earliest point in time that is acceptable to
recover the data, and it effectively quantifies the permissible amount of data loss
in case of interruption.
An IS auditor finds that database administrators (DBAs) have access to the log
location on the database server and the ability to purge logs from the system.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
What is the BEST audit recommendation to ensure that DBA activity is effectively
monitored?
Select an answer:
A.
Change permissions to prevent DBAs from purging logs.
B.
Forward database logs to a centralized log server.
C.
Require that critical changes to the database are formally approved.
D.
Back up database logs to tape.
✓ :~~ You are correct, the answer is B.
A. Changing the database administrator (DBA) permissions to prevent DBAs from
purging logs may not be feasible and does not adequately protect the availability
and integrity of the database logs.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
B. To protect the availability and integrity of the database logs, it is most feasible
to forward the database logs to a centralized log server to which the DBAs do not
have access.
C. Requiring that critical changes to the database are formally approved does not
adequately protect the availability and integrity of the database logs.
D. Backing up database logs to tape does not adequately protect the availability
and integrity of the database logs.
Which of the following is MOST important to determine the recovery point
objective (RPO) for a critical process in an enterprise?
Select an answer:
A.
Number of hours of acceptable downtime
B.
Total cost of recovering critical systems
C.
Master01 | September, 2024/2025 | Latest update
