Certified Information Systems Auditor (CISA) — Question 87

Which of the following is the PRIMARY reason an IS auditor would recommend offsite backups although critical data is already on a redundant array of inexpensive disks (RAID)?

Answer options

• A. The array cannot recover from a natural disaster.
• B. The array relies on proper maintenance.
• C. The array cannot offer protection against disk corruption.
• D. Disks of the array cannot be hot-swapped for quick recovery.

Correct answer: A

Explanation

The correct answer is A because offsite backups are essential for disaster recovery, particularly in scenarios like natural disasters where on-site data may be compromised. The other options, while valid concerns, do not address the critical need for geographic redundancy in the event of a catastrophic event affecting the physical location of the RAID array.