第六章 灾难恢复与业连续性计划.doc

第六章：灾难恢复与业务连续性计划 C6-1 During an audit, an IS auditor notes that an organizations business continuity plan (BCP) does not adequately address information confidentiality during a recovery process. The IS auditor should recommend that the plan be modified to include: A .the level of information security required when business recovery procedures are invoked. B. information security roles and responsibilities in the crisis management structure. C. information security resource requirements. D. change management procedures for information security that could affect business continuity arrangements. 6-1 在审计中，一个IS审计师注意到一个组织的业务持续计划不能适当解决恢复过程中的信息机密性。这个IS审计师应该推荐计划被修改： A.当业务恢复进程被启用时信息安全所需要的层次 B.在危机管理架构中的信息安全角色和责任 C.信息安全资源需求 D.信息安全的改变管理进程可能会影响业务持续安排 A Business should consider whether information security levels required during recovery should be the same, lower or higher than when business is operating normally. In particular, any special rules for access to confidential data during a crisis need to be identified. The other choices do not directly address the information confidentiality issue. 答案A解析：.业务应该考虑是否在恢复时需要相同的安全级别，或者比平时的低或者高。特别的是，一些在紧急时候访问加密数据的规则需要被辨识。其他选项并不直接解决信息机密性问题。 C6-2 During a disaster recovery test, an IS auditor observes that the performance of the disaster recovery sites server is slow. To find the root cause of this, the IS auditor should FIRST review the: A. event error log generated at the disaster recovery site. B. disaster recovery test plan. C. disaster recovery plan (DRP). D. configurations and alignment of the primary and disaster recovery sites. 6-2 在灾难恢复测试中，一个IS审计师发现灾难恢复站点的服务器缓慢，为了找出根本原因，信息系统审计师应该首先审查： A.灾难备份点的事件错误日志生成 B.灾难备份测试计划 C.灾难备份计划 D.配置并确保主站与和灾难备份点保持一致 D Since the configuration of the system is the most probable cause, the IS auditor should review that first. If the issue cannot be clarified, the IS auditor should then review the event error log. The disaster recovery test plan and the disaster recov