During an audit, an IS auditor notes that an organization’s business continuity plan (BCP) does not
adequately address information confidentiality during a recovery process. The IS auditor should

recommend that the plan be modified to include:

What is the BEST backup strategy for a large database with data supporting online sales?

Which of the following backup techniques is the MOST appropriate when an organization requires
extremely granular data restore points, as defined in the recovery point objective (RPO)?

In the event of a data center disaster, which of the following would be the MOST appropriate
strategy to enable a complete recovery of a critical database?

Which of the following should be the MOST important criterion in evaluating a backup solution for
sensitive data that must be retained for a long period of time due to regulatory requirements?

An organization currently using tape backups takes one full backup weekly and incremental
backups daily. They recently augmented their tape backup procedures with a backup-to- disk
solution. This is appropriate because:

Network Data Management Protocol (NDMP) technology should be used for backup if:

In which of the following situations is it MOST appropriate to implement data mirroring as the
recovery strategy?

IS management has decided to install a level 1 Redundant Array of Inexpensive Disks (RAID)
system in all servers to compensate for the elimination of offsite backups. The IS auditor should
recommend:

Which of the following ensures the availability of transactions in the event of a disaster?