Off-site data storage should be kept synchronized when preparing for recovery of time-sensitive data such as
that resulting from which of the following? Choose the BEST answer.

Mitigating the risk and impact of a disaster or business interruption usually takes priority over transference of
risk to a third party such as an insurer. True or false?

How can minimizing single points of failure or vulnerabilities of a common disaster best be controlled?

Which of the following is the dominating objective of BCP and DRP?

An off-site processing facility should be easily identifiable externally because easy identification helps ensure
smoother recovery. True or false?

If a database is restored from information backed up before the last system image, which of the following is
recommended?

The purpose of business continuity planning and disaster-recovery planning is to:

Organizations should use off-site storage facilities to maintain _________________ (fill in the blank) of current
and critical information within backup files. Choose the BEST answer.

If a programmer has update access to a live system, IS auditors are more concerned with the programmer’s
ability to initiate or modify transactions and the ability to access production than with the programmer’s ability to
authorize transactions. True or false?

Rather than simply reviewing the adequacy of access control, appropriateness of access policies, and
effectiveness of safeguards and procedures, the IS auditor is more concerned with effectiveness and
utilization of assets. True or false?