11/12/2016 techbus.safaribooksonline.com/print?

xmlid=9780789735737%2Fch09lev1sec5

Username:AdityaMishraBook:CISAExamPrep.Nopartofanychapterorbookmaybereproducedortransmittedinanyformbyanymeanswithouttheprior
writtenpermissionforreprintsandexcerptsfromthepublisherofthebookorchapter.RedistributionorotherusethatviolatesthefairuseprivilegeunderU.S.
copyrightlaws(see17USC107)orthatotherwiseviolatestheseTermsofServiceisstrictlyprohibited.ViolatorswillbeprosecutedtothefullextentofU.S.
FederalandMassachusettslaws.

ApplyYourKnowledge
Thischapterdocumentedtheimportanceofbusinesscontinuityanddisasterrecovery.ThisApplyYour
KnowledgesectionhasyoureviewsomeoftheitemsanISauditorwouldneedtoreview.

Theexercisehasyouexamineahypotheticalorganizationandlistpossibleaudititems.

Exercises

9.1.BusinessImpactandRisk

EstimatedTime:10Minutes

Reviewthefollowingprofileandthenanswerthefollowingquestions.

Kerney,Cleveland,andGlassLawFirm

DrivingConcern

ThishighflyinglawfirmlocatedintheWashington,D.C.,areahasservicedawhoswhoofindividualsinsideand
outsidethebeltway.Thefirmrecentlysufferedamajornetworkoutageafterakeyserverfailedanditwas
determinedthatthebackupmediawascorrupt.ManagementhasexistingBCPplansbutcouldnotcontactthe
personinchargeofbackupsduringthislatenightproblem.Theyarenowworriedthattheplansarenotadequate.

Overview

Thefirmhastwooffices:oneintheD.C.areaandtheotherontheWestCoast.Thefirmhandlesmanyconfidential
documents,oftenofhighmonetaryvalue.Thefirmisalwayslookingforwaystofreeupthepartnersfrom
administrativetaskssothattheycanhavemorebillablehours.PartnersaccesstheirdatafromwirelessLANsand
remotelythroughacorporateVPN.

ThetwoofficesareconnectedbyaT1leasedline.OnlytheD.C.officehasaconnectiontotheInternet.TheWest
CoastofficeconnectstotheInternetthroughtheD.C.office.ThewirelessnetworksupportsWindowsserversinthe
D.C.office.Partnersalsocarrynotebookcomputersthatcontainmanyconfidentialdocumentsneededatclient
sites.Noencryptionisused,andthereisnoinsurancetoprotectagainstdowntimeordisruptions.

1.WhichofthefollowingitemsshouldyouperformifyouwereaskedtoauditthelawfirmsBCPplans?
Verifythatthebusinesscontinuityplanprovidesfortherecoveryofallsystems?Yes/No
RequirethatyouoranotherauditorispresentduringatestoftheBCPplan?Yes/No
Verifythatthenotificationdirectoryisbeingmaintainedandiscurrent?Yes/No
VerifythattheISdepartmentisresponsiblefordeclaringadisasterifsuchasituationrepeateditself?
Yes/No
Suggestthatthelawfirmincreaseitsrecoverytimeobjective?Yes/No
Determinethemostcriticalfinding?Lackofinsurance/Lossofdata

2.Examinethelistfromitem1andcompareyouranswerswiththefollowing:
Verifythatthebusinesscontinuityplanprovidesfortherecoveryofallsystems?Yes/No(Typically,only
50%ofinformationiscritical.)

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 1/6
11/12/2016 techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5

RequirethatyouoranotherauditorispresentduringatestoftheBCPplan?Yes/No(Theauditorshouldbe
presenttomakesurethetestmeetsrequiredtargets.)

Verifythatthenotificationdirectoryisbeingmaintainedandiscurrent?Yes/No(Withoutanotificationsystem,
thereisnoeasywaytocontactemployeesorforthemtocheckincaseofdisaster.)

VerifythattheISdepartmentisresponsiblefordeclaringadisasterifsuchasituationrepeateditself?Yes/No
(Seniormanagementshoulddesignatesomeoneforthattask.)

Suggestthatthelawfirmincreaseitsrecoverytimeobjective?Yes/No(Thiswouldincreaserecoverytime,not
decreaseit.)

Determinethemostcriticalfinding?Lackofinsurance/Lossofdata(Themostvitalassetforanorganizationisits
data.)

ExamQuestions

1.Tapebackupshouldbeusedasarecoverystrategywhen:

A. TheRPOishigh.

B. TheRPOislow.

C. TheRTOislow.

D. Faulttoleranceislow.

2.Whichofthefollowingisthebestreasontouseahotsite?

A. Itcanbeusedforlongtermprocessing.

B. Itisnotasubscriptionservice.

C. Thereisnoadditionalcostforusageorperiodictesting.

D. Itisreadyforservice.

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 2/6
11/12/2016 techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5

3.WhichofthefollowingdescribesthegreatestadvantageofJBOD?

A. Incaseofdrivefailure,onlythedataontheaffecteddriveislost.

B. Itissuperiortodiskmirroring.

C. ItoffersgreaterperformancegainsthanRAID.

D. ComparedtoRAID,itoffersgreaterfaulttolerance.

4.Whichofthefollowingprocessesismostcriticalintermsofrevenuegeneration?

A. Discretionary

B. Supporting

C. Core

D. Critical

5.HowoftenshouldBCPplansbeupdated?

A. Every5years

B. Everyyearorasrequired

C. Every6months

D. Uponanychangeormodification

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 3/6
11/12/2016 techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5

6.Whenmaintainingdatabackupsatoffsitelocations,whichofthefollowingisthemostimportantcontrol
concern?

A. Thatthestoragesiteisassecureastheprimarysite

B. Thatasuitabletaperotationplanisinuse

C. Thatbackupmediaistestedregularly

D. Thatcopiesofcurrentcriticalinformationarekeptoffsite

7.ThemostimportantpurposeoftheBIAiswhichofthefollowing?

A. Identifycountermeasures

B. Prioritizecriticalsystems

C. Developrecoverystrategies

D. Determinepotentialteststrategies

8.WhichofthefollowingisnotavalidBCPtesttype?

A. Papertest

B. Structuredwalkthrough

C. Fulloperation

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 4/6
11/12/2016 techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5

D. Preparednesstest

9.Whichofthefollowingisthepracticeofroutingtrafficthroughdifferentcablefacilities?

A. Alternaterouting

B. Longhauldiversity

C. Diverserouting

D. Lastmileprotection

10.Whenclassifyingcriticalsystems,whichcategorydescribesthefollowingdescription:Thesefunctionsare
importantandcanbeperformedbyabackupmanualprocess,butnotforalongperiodoftime.

A. Vital

B. Sensitive

C. Critical

D. Demanddriven

AnswerstoExamQuestions

1.B.Therecoverypointobjectiveistheearliestpointintimeatwhichrecoverycanoccur.IfRPOislow,tape
backuporanothersolutionisacceptable.AnswerAisincorrectbecauseahighRPOwouldrequire
mirroringorothertypeoftimelyrecoverymethod.AnswerCisincorrectbecausealowRTOwouldmean
thatlittletimeisavailableforrecovery.AnswerDisincorrectbecausealowfaulttoleranceindicatesthat
littletimeisavailableforunavailableservices.
2.D.Althoughhotsitesareanexpensivealternative,theyarereadyforservice.AnswerAisincorrectbecause

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 5/6
11/12/2016 techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5

theycannotbeusedforlongtermprocessing.AnswerBisincorrectbecauseahotsiteisasubscription
service.AnswerCisincorrectbecausethereareadditionalfeestheorganizationmustpayavarietyoffees
forusage,testing,andaccess.
3.A.JBODallowsuserstocombinemultipledrivesintoonelargedrive.JBODsonlyadvantageisthat,in
caseofdrivefailure,onlythedataontheaffecteddriveislost.AnswersB,C,andDareincorrectbecause
JBODisnotsuperiortodiskmirroring,isnotfasterthanRAID,andoffersnofaulttolerance.
4.C.Criticalprocessesthatproducerevenueareconsideredacoreactivity.AnswerAisincorrectbecause
discretionaryprocessareconsiderednonessential.AnswerBisincorrectbecausesupportingprocesses
requireonlyminimumBCPservices.AnswerDdoesnotspecifyaprocesscriticalisatermusedtodescribe
howimportanttheserviceorprocessis.
5.D.BCPplanningisanongoingprocessthatshouldberevisitedeachtimethereisachangetothe
environment.Therefore,answersA,B,andCareincorrect.
6.D.Themostcriticalconcerniskeepingthecopiesofcriticalinformationcurrentatanoffsitelocation.
AnswersA,B,andCareimportantbutarenotthemostimportant.
7.B.TheBIAisanimportantpartoftheBCPprocess.ThepurposeoftheBIAistodocumenttheimpactof
outages,identifycriticalsystems,prioritizecriticalsystems,analyzeoutageimpact,anddetermine
recoverytimesneededtokeepcriticalsystemsrunning.AnswersA,C,andDareincorrectbecausetheydo
notspecifystepsperformedduringtheBIA.
8.B.ThereisnoBCPtestknownasastructuredwalkthrough.ValidtypesarelistedinanswersA,C,andD:
papertests,fulloperationtest,andpreparednesstest.
9.C.Diverseroutingisthepracticeofroutingtrafficthroughdifferentcablefacilities.AnswerAisincorrect
becausealternateroutingistheabilitytouseanothertransmissionlineiftheregularlineisbusyor
unavailable.AnswerBisincorrectbecauselonghauldiversityisthepracticeofhavingdifferentlong
distancecommunicationcarriers.AnswerDisincorrectbecauselastmileprotectionprovidesasecond
localloopconnection.
10.A.Vitalmeetsthedescriptionoffunctionsthatareimportantandcanbeperformedbyabackupmanual
process,butnotforalongperiodoftime.AnswerBisincorrectbecauseitdescribestasksthatare
importantbutcanbeperformedmanuallyatareasonablecost.AnswerCisincorrectbecausecriticalrefers
toextremelyimportantfunctions.AnswerDisincorrectbecausedemanddrivendoesnotdescribeavalid
functionallabel.

http://techbus.safaribooksonline.com/print?xmlid=9780789735737%2Fch09lev1sec5 6/6