Exam IIA-CIA-Part3 topic 2 question 110 discussion

Actual exam question from IIA's IIA-CIA-Part3

Question #: 110
Topic #: 2

While conducting audit procedures at the organization's data center, an internal auditor noticed the following:

- Backup media was located on data center shelves.
- Backup media was organized by date.
- Backup schedule was one week in duration.
- The system administrator was able to present restore logs.

Which of the following is reasonable for the internal auditor to conclude?

A. Backup media is not properly stored, as the storage facility should be off-site.
B. Backup procedures are adequate and appropriate according to best practices.
C. Backup media is not properly indexed, as backup media should be indexed by system, not date.
D. Backup schedule is not sufficient, as full backup should be conducted daily.

Show Suggested Answer

Suggested Answer: A 🗳️

by Crazyhydra at Sept. 28, 2023, 3:42 p.m.

Comments

Submit Cancel

Elvoo

3 months, 3 weeks ago

Selected Answer: A

I think A is correct

upvoted 1 times

...

emtofid

6 months, 2 weeks ago

Selected Answer: B

Backup media on shelves: It’s common practice to store backup media in a secure location within the data center, though off-site storage can be an additional safeguard (covered by option A). However, storing backup media on-site is acceptable in many cases if appropriate security controls are in place.

upvoted 1 times

...