exam questions

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 86 discussion

Actual exam question from Isaca's CISA
Question #: 86
Topic #: 1
[All CISA Questions]

During an audit of a reciprocal disaster recovery agreement between two companies, the IS auditor would be MOST concerned with the:

  • A. allocation of resources during an emergency.
  • B. maintenance of hardware and software compatibility.
  • C. differences in IS policies and procedures.
  • D. frequency of system testing.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
gmutonyi
Highly Voted 3 years, 7 months ago
B for me. If one organization updates its hardware and software configuration, it may mean that it is no longer compatible with the systems of the other party in the agreement. This may mean that each company is unable to use the facilities at the other company to recover their processing following a disaster.
upvoted 10 times
...
starzuu
Highly Voted 1 year, 6 months ago
Selected Answer: B
I think its B. This is straight from the CISA Review Manual: Reciprocal agreements are agreements between separate, but similar, companies to temporarily share their IT facilities in the event that one company loses processing capability. Reciprocal agreements are not considered a viable option due to the constraining burden of maintaining hardware and software compatibility between the companies, the complications of maintaining security and privacy compliance during shared operations, and the difficulty of enforcing the agreements should a disagreement arise at the time the plan is activated.
upvoted 7 times
...
a84n
Most Recent 8 months, 2 weeks ago
Selected Answer: C
Answer: C Differences in IS policies and procedures between the two organizations can lead to inconsistencies, misunderstandings, and potential conflicts during a disaster recovery scenario. Misalignment in policies and procedures may result in delays, errors, or inefficiencies in executing the disaster recovery plan, undermining the effectiveness of the reciprocal agreement.
upvoted 1 times
...
5b56aae
8 months, 2 weeks ago
Selected Answer: B
Compability
upvoted 1 times
...
TTH1019
1 year, 7 months ago
Selected Answer: B
The maintenance of hardware and software compatibility is a critical aspect of a reciprocal disaster recovery agreement. In the event of a disaster, the two companies should be able to seamlessly transition their IT operations to each other's facilities. If there are compatibility issues between their hardware and software systems, it could hinder the successful execution of the disaster recovery plan.
upvoted 4 times
...
007Georgeo
1 year, 8 months ago
Selected Answer: B
Is B : For a reciprocal agreement to be effective, hardware and software at the two sites must be compatible. Processes to ensure this occurred must be in place. Choice D, frequency of system testing, is a concern, but the reason for considering this is that it tests hardware and software compatibility. Choice A is an issue when examining the planning process, not the reciprocal agreement. Choice C is not an issue since the organization can have differences in policies and procedures and still be able to run their systems on each others sites in the event of a disaster
upvoted 2 times
...
missH
1 year, 9 months ago
Selected Answer: B
B definitely
upvoted 2 times
...
swmasinde
1 year, 10 months ago
Selected Answer: B
For a reciprocal agreement to be effective, hardware and software at the two sites must be compatible. Processes to ensure this occurred must be in place.
upvoted 2 times
...
yeoris
2 years, 1 month ago
A seems to be also correct. Maintaining compatibility is useless if resources cannot be allocated in case of emergency. Of course, resource allocation is useless if compatibility cannot be maintained.
upvoted 2 times
Eric0223
1 year, 12 months ago
agreed, the key point here is not about compatibility but it s about how to share those resources during this cirtical moment. compatibility takes less preferance than this. we have to ensure this process will protect company A to have those resources than B or in terms of the agreement between them
upvoted 1 times
...
...
Forever25
2 years, 2 months ago
Selected Answer: B
B should be the correct answer
upvoted 5 times
...
Deeplaxmi
2 years, 3 months ago
as per cisa review manual, answer could be B. IS policies and procedure may be different as the organisations are different basically.. Reciprocal agreement is temperory arrangemnet which has to accomodate this. However hardware incompatiability will render temperory arrangemnet also unavailable which is disasterous.
upvoted 5 times
...
MunaM
2 years, 4 months ago
I think it's C. Can someone please confirm?
upvoted 1 times
mnfdsfhj
2 years, 1 month ago
This is the place to check and then post.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...