Off-site data storage should be kept synchronized when preparing for recovery of time- sensitive
data such as that resulting from which of the following? Choose the BEST answer.

Mitigating the risk and impact of a disaster or business interruption usually takes priority over
transference of risk to a third party such as an insurer. True or false?

How can minimizing single points of failure or vulnerabilities of a common disaster best be
controlled?

Which of the following is the dominating objective of BCP and DRP?

An off-site processing facility should be easily identifiable externally because easy identification
helps ensure smoother recovery. True or false?

If a database is restored from information backed up before the last system image, which of the
following is recommended?

The purpose of business continuity planning and disaster-recovery planning is to:

Organizations should use off-site storage facilities to maintain _________________ (fill in the blank)
of current and critical information within backup files. Choose the BEST answer.

If a programmer has update access to a live system, IS auditors are more concerned with the
programmer’s ability to initiate or modify transactions and the ability to access production than with
the programmer’s ability to authorize transactions. True or false?

Rather than simply reviewing the adequacy of access control, appropriateness of access policies,
and effectiveness of safeguards and procedures, the IS auditor is more concerned with
effectiveness and utilization of assets. True or false?