Based on test results, an IT auditor concluded that the organization would suffer unacceptable loss of data if there was a disaster at its data center. Which of the following test results would likely lead the auditor to this conclusion?
Based on test results, an IT auditor concluded that the organization would suffer unacceptable loss of data if there was a disaster at its data center. Which of the following test results would likely lead the auditor to this conclusion?
Critical system backup tapes being taken off site less frequently than required significantly increases the risk of data loss in the event of a disaster. If backups are not updated and stored off-site regularly, the organization will not have the most recent data available for recovery, leading to a potentially unacceptable loss of data. Regularly updated off-site backups are crucial for disaster recovery, and failing to adhere to this practice could result in severe data loss.
I believe this should be D. If A occurs, we don't get the data back in a timely manner - although that IS an issue, it doesn't result in UNACCEPTABLE LOSS OF DATA - we just don't get it in a timely fashion. However, if D happens, and we don't turn in our current data as often as we should offsite, that means we lose MORE data when a disaster occurs, possible an unacceptable loss of data.
Based on the given options, the test result that would likely lead the IT auditor to conclude that the organization would suffer an unacceptable loss of data in the event of a disaster at its data center is option D: Critical system backup tapes are taken off site less frequently than required. Taking critical system backup tapes off-site is an essential part of disaster recovery and data protection. Off-site storage ensures that the data is protected from physical damage or loss at the primary data center. If the backup tapes are not taken off-site as frequently as required, it increases the risk that in the event of a disaster at the data center, the organization will not have the most recent backups available for recovery. This can result in a significant loss of data and potentially have severe consequences for the
I can see why it's not B or C, and I can see why A could be an issue, but doesn't D sound like MORE of an issue? What do you guys think?
D is correct
I agree with D being the correct answer. A is an indicator of an issue which may or may not lead to an unacceptable loss of data subject to further procedure. But, D is a definite unacceptable loss of data.
D is the correct answer!
Can someone provide a reference if they disagree with the correct answer? It seems like so many answers in this section are incorrect as several people are disagreeing.
Question is what could lead the IT Auditor to conclude...? the lack of evidence of back up