Home › MCQs › CISA › Question #6838
Back to Questions
CISA QUESTION #6838
Question 1
In evaluating disaster recovery procedures, an auditor finds that backup tapes are sent to an offsite facility but no verification testing has been conducted to confirm tapes can be successfully restored. What is the PRIMARY risk?
  • Incomplete documentation
  • Backups may be unrestorable rendering disaster recovery plan ineffective✔️
  • Increased storage costs
  • Delayed recovery time
Correct Answer Explanation
The ability to restore from backups is more critical than the existence of backups. Without restore testing, the organization cannot know if backups are valid, complete, or restorable. Many organizations have discovered during actual disasters that their untested backups were unusable—effectively having no backups at all.