During a SOC 2 engagement, you observe that the organization tests its Disaster Recovery Plan (DRP) annually using a 'Tabletop Exercise'. What does this involve?

Answer options:

Full interruption of the primary data center to force failover to the secondary site.

Restoring data from backups to a test server.

Key stakeholders meet to discuss and walk through the plan scenarios without actual system failover.

Running the primary and secondary sites in parallel.

How to approach this question

The name 'Tabletop' implies sitting around a table.

Full Answer

C.Key stakeholders meet to discuss and walk through the plan scenarios without actual system failover.✓ Correct

A Tabletop Exercise is a discussion-based session where team members meet to review their roles and responses during a simulated emergency situation, without actually touching the live systems.

Common mistakes

Confusing tabletop with parallel or full interruption tests.

Question 16 All questions Question 18

Practice the full CPA ISC Practice Exam 5

82 questions · hints · full answers · grading

More questions from this exam

Q01A service organization provides a cloud-based payroll processing application to its user entities...Medium Q02An auditor is reviewing the shared responsibility model for a client using an Infrastructure as a...Hard Q03A financial institution requires a cloud deployment model that offers the highest level of contro...Medium Q04During an IT audit, you observe that a company uses a 'Hybrid Cloud' architecture. Which scenario...Medium Q05Which component of IT architecture is primarily responsible for translating domain names (like ww...Easy

View all 82 questions →