GROUP H

DISASTER RECOVERY PLANNING

1. The following are the three categories of disaster that can rob an
organization of its IT resources, except:
a.
b.
c.
d.

Natural
Sabotage
Human-made
System Failure

2. Among the three categories of disaster, what can simultaneously

impact many organizations within the affected geographic area?
a.
b.
c.
d.

Natural
Sabotage
Human-made
System Failure

3. It is a comprehensive statement of all actions to be taken before,

during and after any type of disaster.
a.
b.
c.
d.

Disaster Recovery Team

Site-Backup
Mutual Aid Pact
Disaster Recovery Plan

4. What is the first essential element of Disaster Recovery Planning?

a.
b.
c.
d.

Identify critical applications

Create a disaster recovery team
Provide site-backup
Specify backup and offsite storage procedures

5. Delays in performing essential tasks shorten the recovery period and

diminish the prospects for a successful recovery.
a. True
b. False
6. It is an agreement between two or more organizations to aid with each
other with their data processing needs in the event of a disaster.
a. Mutual Aid Pact
b. Empty Shell

c. Recovery Operations Center

d. Internally Provided Backup
7. Recovery Operations Center or cold site is an arrangement wherein the
company buys or leases a building that will serve as a data center.
a. True
b. False
8. Before entering a Recovery Operations Center (ROC) arrangement,
management should consider the potential problems of overcrowding
and geographic clustering of the current membership.
a. True
b. False
9. It is a duplicate data processing facility which larger organizations with
multiple data processing centers often prefer the self-reliance that it
creates.
a.
b.
c.
d.

Mutual Aid Pact

Empty Shell
Recovery Operations Center
Internally Provided Backup

10.
Internally provided backup permits firms
standardized hardware and software configurations.

to

develop

a. True
b. False
11.
of
a.
b.
c.
d.

It is an off-site backup that include procedures to create copies

current versions of critical applications.
Application Backup
Operating System Backup
Backup Documentation
Empty Shell

12.
Testing DRP is most useful when the simulation of a disruption is
a surprise.
a. True
b. False
13.
What does the auditor verify in a managements disaster
recovery plan?

a.
b.
c.
d.

Adequacy and feasibility

----------

14.
Information outsourced to offshore IT vendors raises unique and
serious questions regarding internal control and the protection of
sensitive personal data.
a. True
b. False
15.
a.
b.
c.
d.
16.

Backup technique used in sequential batch systems.

Grandparent-parent-child
HDD
Cold Site
Warm Sites
Which of the following is a feature of fault tolerance control?

a. interruptible power supplies

b. RAID
c. DDP
d. MDP
17.
Management may outsource its organizations IT functions, as
well as outsourcing its management responsibilities under SOX for
ensuring adequate IT internal controls.
a. True
b. False
18.
IT outsourcing cannot affect incongruence between a firms IT
strategic planning and its business planning functions.
a. True
b. False
19.
It is an audit procedure in verifying the DRP wherein auditor
should verify that copies of critical applications and operating systems
are stored off-site.
a. Software backup
b. Data backup
c. Critical applications list

20.
It is and audit procedure wherein the auditor should verify that
critical data files are backed up in accordance with the DRP.
a. Data backup
b. Site backup
c. Critical Application List
21.
It is a backup procedure which can be made more efficient
through the use of Computer Aided Software Engineering (CASE)
documentation tools.
a.
b.
c.
d.

Backup Supplies and source documents

RAID
Empty Shell
Backup Documentation

22.
If the client organization is using the empty shell method, then it
is not necessary for the auditor to verify the existence of valid
contracts with hardware vendors that guarantee delivery of needed
computer hardware with minimum delay after the disaster.
a. False
b. True
23.
If the client is a member of a ROC, the auditor should be
concerned about the number of ROC members and their geographic
dispersion.
a. True
b. False