CISA Practice Question: Information Systems Operations and Business Resilience
An IT auditor is reviewing the business continuity plan (BCP) testing schedule. The organization conducts a test where participants discuss their roles and responses to a scenario without any actual system activation. Which type of test is this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Tabletop exercise
A tabletop exercise is a discussion-based test where participants walk through a scenario without executing procedures or activating systems.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Parallel test
Why it's wrong here
Incorrect: Parallel tests run DR systems alongside production.
- ✗
Walkthrough
Why it's wrong here
Incorrect: A walkthrough involves reviewing the plan step by step, not necessarily discussion-based.
- ✗
Simulation
Why it's wrong here
Incorrect: Simulation tests specific scenarios with some operational elements.
- ✓
Tabletop exercise
Why this is correct
Correct: Tabletop exercises are discussion-only and focus on roles and procedures.
Go deeper
Related to this question
About these practice questions
This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.