easyMultiple ChoiceObjective-mapped
CISA Multi-cloud strategy Practice Question
A small e-commerce company uses a cloud-based e-commerce platform with automatic scaling. The company's business continuity plan relies on the cloud provider's promise of 99.99% uptime. During a regional outage affecting the cloud provider's primary availability zone, the company's website became unavailable for 2 hours, resulting in lost sales. The IT manager wants to improve resilience. Which of the following is the BEST action?
⚠ Common exam trap
Candidates may confuse 'increasing capacity' or 'improving SLA' with resilience, but resilience requires redundancy across independent failure domains.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a multi-cloud strategy with active-active deployment.
Implementing a multi-cloud strategy with active-active deployment (Option D) is the best action because it ensures that if one cloud provider experiences a regional outage, the application can continue operating from another provider, thus avoiding single points of failure. Option A (secondary on-premises server) would require significant investment and may not integrate seamlessly with the cloud platform; it also does not address the root cause of relying on a single provider. Option B (increasing reserved capacity) helps with scaling but does not protect against provider outages. Option C (negotiating a higher SLA) may provide financial compensation but does not prevent downtime.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Maintain a secondary on-premises server for failover.
Why it's wrong here
On-premises may be costly and complex; not the best for a small e-commerce cloud-native setup.
- ✗
Increase the reserved capacity in the cloud to handle spikes.
Why it's wrong here
This addresses capacity but does not protect against a regional outage affecting the entire provider.
- ✗
Negotiate a higher service-level agreement (SLA) with the provider.
Why it's wrong here
A higher SLA provides financial compensation but does not improve technical resilience.
- ✓
Implement a multi-cloud strategy with active-active deployment.
Why this is correct
Multi-cloud reduces dependency on a single provider and improves availability.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.