Home MCQs CISA Question #6862
Back to Questions
CISA QUESTION #6862
Question 1
An organization performs annual disaster recovery tests by restoring a single non-critical test database. Management considers DR testing complete and successful. What is the PRIMARY testing deficiency?
  • Insufficient test duration
  • Test does not validate actual critical system recovery capability or recovery time objectives✔️
  • Incomplete documentation
  • Limited scope
Correct Answer Explanation
Testing only non-critical systems provides no assurance that critical systems can be recovered within required timeframes. DR testing must validate the actual systems and processes needed during a disaster. Testing a non-critical database proves only that one simple restore works, not that the organization can recover operations.