第六章灾难恢复与业务连续性计划.doc

《第六章灾难恢复与业务连续性计划.doc》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、第六章：灾难恢复与业务连续性计划C6-1Duringanaudit,anISauditornotesthatanorganization'sbusinesscontinuityplan(BCP)doesnotadequatelyaddressinformationconfidentialityduringarecoveryprocess.TheISauditorshouldrecommendthattheplanbemodifiedtoinclude:A.thelevelofinformationsecurityrequire

2、dwhenbusinessrecoveryproceduresareinvoked.B.informationsecurityrolesandresponsibilitiesinthecrisismanagementstructure.C.informationsecurityresourcerequirements.D.changemanagementproceduresforinformationsecuritythatcouldaffectbusinesscontinuityarrangements.6-1在审计中，一个

3、IS审计师注意到一个组织的业务持续计划不能适当解决恢复过程中的信息机密性。这个IS审计师应该推荐计划被修改：A.当业务恢复进程被启用时信息安全所需要的层次B.在危机管理架构中的信息安全角色和责任C.信息安全资源需求D.信息安全的改变管理进程可能会影响业务持续安排ABusinessshouldconsiderwhetherinformationsecuritylevelsrequiredduringrecoveryshouldbethesame,lowerorhigherthanwhenbusinessisoperatingno

4、rmally.Inparticular,anyspecialrulesforaccesstoconfidentialdataduringacrisisneedtobeidentified.Theotherchoicesdonotdirectlyaddresstheinformationconfidentialityissue.答案A解析：.业务应该考虑是否在恢复时需要相同的安全级别，或者比平时的低或者高。特别的是，一些在紧急时候访问加密数据的规则需要被辨识。其他选项并不直接解决信息机密性问题。C6-2Duringadisast

5、errecoverytest,anISauditorobservesthattheperformanceofthedisasterrecoverysite'sserverisslow.Tofindtherootcauseofthis,theISauditorshouldFIRSTreviewthe:A.eventerrorloggeneratedatthedisasterrecoverysite.B.disasterrecoverytestplan.C.disasterrecoveryplan(DRP).D.configura

6、tionsandalignmentoftheprimaryanddisasterrecoverysites.6-2在灾难恢复测试中，一个IS审计师发现灾难恢复站点的服务器缓慢，为了找出根本原因，信息系统审计师应该首先审查：A.灾难备份点的事件错误日志生成B.灾难备份测试计划C.灾难备份计划D.配置并确保主站与和灾难备份点保持一致DSincetheconfigurationofthesystemisthemostprobablecause,theISauditorshouldreviewthatfirst.Iftheissuec

7、annotbeclarified,theISauditorshouldthenreviewtheeventerrorlog.Thedisasterrecoverytestplanandthedisasterrecoveryplan(DRP)wouldnotcontaininformationaboutthesystemconfiguration.答案D解析：.既然系统配置是最可能的原因，IS审计师因为首先检查。如果问题不能被澄清，IS审计师检查事件错误日志。灾备测试计划灾备计划不应该包含系统配置的信息。C6-3Whichoft

8、hefollowingistheGREATESTriskwhenstoragegrowthinacriticalfileserverisnotmanagedproperly?A.BackuptimewouldsteadilyincreaseB.Backupoperationa