Certified Information Systems Auditor (CISA) — Question 117

Which of the following is MOST important for an IS auditor to confirm upon learning that an organization utilizes storage virtualization for key systems in their environment?

Answer options

• A. Restoration testing is performed at regular intervals.
• B. Redundancy is included in the storage architecture.
• C. Backup drives are available at the disaster recovery hot site.
• D. Access to physical media is limited to authorized individuals.

Correct answer: B

Explanation

The correct answer, B, highlights the necessity of redundancy in storage architecture to ensure data availability and protection against failures. While A, C, and D are important aspects of data management and security, they do not address the specific risks associated with storage virtualization which can lead to single points of failure if redundancy is not implemented.