Certified Information Systems Auditor (CISA) — Question 1131

In which of the following situations is it MOST appropriate to implement data mirroring as part of a recovery strategy?

Answer options

• A. When the mean time between failures (MTBF) is long
• B. When the recovery point objective (RPO) is short
• C. When disaster tolerance is low
• D. When the risk of a ransomware attack is high

Correct answer: B

Explanation

The correct answer is B because data mirroring is designed to ensure that data is up to date and recoverable with minimal loss, aligning perfectly with a short recovery point objective (RPO). The other options do not necessitate immediate data recovery or do not directly relate to the timeliness of data recovery, making them less suitable for data mirroring.