mediumMultiple ChoiceObjective-mapped
CISA Practice Question: During an audit of an organization's disaster…
During an audit of an organization's disaster recovery plan (DRP), the IS auditor finds that the plan was last tested 18 months ago and no test results were documented. What should the auditor recommend?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conduct a DRP test and document the results within the next quarter
A recent test with documented results provides assurance. Option A is incorrect because testing frequency should be based on risk, not necessarily semiannual. Option B is wrong because the recommendation should address the lack of testing and documentation. Option D is incorrect because that is management's role; the auditor recommends.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Test the DRP semiannually
Why it's wrong here
Recommended frequency depends on risk; annual is common.
- ✗
Document the results of all past tests
Why it's wrong here
Past tests are not available; focus on future.
- ✓
Conduct a DRP test and document the results within the next quarter
Why this is correct
Immediate testing and documentation address the gap.
- ✗
Assign responsibility for DRP testing to the IT manager
Why it's wrong here
Responsibility should be defined, but the immediate need is testing.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.