CRISC Information Technology and Security Practice Question
During the solution architecture review, the Architecture Review Board (ARB) identifies a security risk in a proposed cloud migration project. The solution relies on a single cloud region with no disaster recovery plan. Which of the following is the BEST recommendation to mitigate this risk?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy the application across multiple cloud regions with automated failover
The risk of a single region failure can be mitigated by implementing a multi-region deployment with failover. This aligns with high availability and disaster recovery best practices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Deploy the application across multiple cloud regions with automated failover
Why this is correct
Multi-region deployment reduces the risk of a single point of failure and ensures business continuity.
- ✗
Purchase cyber insurance to cover financial losses
Why it's wrong here
Insurance transfers financial risk but does not mitigate the operational risk of downtime.
- ✗
Implement encryption at rest and in transit
Why it's wrong here
Encryption addresses data protection but not availability risk.
- ✗
Conduct a business impact analysis (BIA)
Why it's wrong here
BIA is a preliminary step, not a mitigation.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.