CISA Question 370

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  The primary purpose of backup and recovery controls is not just to back up data, but to ensure that data can be reliably restored when needed. If restores are not tested, you cannot be confident the backups will work in a real disaster or data loss scenario. This is the greatest risk, as it defeats the entire purpose of the backup strategy. Why not the others? A. Backup procedures are not documented 🔸 This is a concern, but not as critical as the inability to restore. Documentation helps consistency, but testing confirms functionality. B. Weekly and monthly backups are stored onsite 🔸 This increases risk in the event of a physical disaster (fire, flood, etc.), but again, it’s not as critical as never validating that you can actually restore data. C. Backups are stored in an external hard drive 🔸 This may raise questions about scalability or durability, but it's a lower risk as long as restores work and the drives are protected.

• Chose D2

  Periodic testing of restores from backups is crucial for verifying the effectiveness and reliability of the backup and recovery processes. Without regular testing, there is a risk that backups may not be functioning correctly, or that data may not be recoverable in the event of a disaster or data loss incident. Testing restores allows organizations to identify any issues or gaps in the backup and recovery procedures, ensuring that critical data can be restored promptly and accurately when needed.

• 1

  Having backups in place is only half the battle. If you haven't tested your ability to restore data from those backups, you can't be confident they will work when needed. So, the answer is D