Exam CISA topic 1 question 39 discussion

d for delta

The question is after evidence. SLA is not evidence. C is correct.

Answer: D

Evidence is required to show that the previous year's defects have been corrected.

vendor memo indicating that the problem regarding insufficient hardware allocation has been corrected provides the best evidence that adequate resources are now allocated to successfully recover the systems

I logically assumed the SLA was already there before last DR testing and the third party vendor ALREADY BROKE the SLA. There is NO point to ensure SLA is in placed if it has already been violated. Rather memo of correction should be an acceptable choice indicating the issue has been solved. So C is a reasonable choice.

D is reliable

Another no sense question by ISACA... Only purpose is to confuse the candidate and nothing else. RACI is a responsibility assignment matrix, if that helps. I don't know which one is the correct answer. I am not convinced by any of the options.

D: Due to SLA

If I were an IS Audit, I should have to concern abt SLA .

How can i rely on a statement made by the vendor without other adequate evidences ?

I think that answer is D

I also think the answer is D

A service level agreement (SLA) is a contract between an organization and its vendor that outlines the vendor's responsibilities for providing specific services, such as disaster recovery. The SLA should include provisions for the availability of adequate hardware and other resources required to support the disaster recovery process. By reviewing the SLA, the IS auditor can determine whether the vendor has made any changes to their resources allocation or service offerings that would address the issue noted in the previous year's disaster recovery test.