Certified Information Systems Auditor (CISA) — Question 891

An organization performs virtual machine (VM) replication instead of daily backups of its critical servers. Which of the following is MOST important to validate when evaluating the adequacy of recovery procedures?

Answer options

• A. Periodic testing of VM replication is completed.
• B. Replication servers are located offsite.
• C. VM load balancing is configured.
• D. Internet access is restricted for VM backup administrators.

Correct answer: A

Explanation

The correctness of option A is significant because periodic testing ensures that the VM replication process functions correctly and can restore data when needed. While option B is also important for disaster recovery, it does not directly validate the recovery process itself. Options C and D, while relevant to performance and security, do not pertain to the validation of recovery procedures.