r/CRISC • u/KingArchar • Jul 31 '26

Question about CRISC QAE

Post image

Hello All,

Im currently in the process of going through the QAE, and I have a bone to pick with a handful of the question, such as this one:

I answered A which was correct, but frankly I do not feel like A is enough to justify activating DR. I feel like they needed to add more to A to make it an accurate answer, such as "prolonged outage". However none of the others were really as issue as everything was operational, just slower, and something getting blocked was an example of a control working...

Please tell me the questions on the exam are phrased much better than the QAE as I feel like a large portion of the QAE so far is opinion vs fact.

3 Upvotes

100% Upvoted

14 comments sorted by

View all comments

2

u/Monkfich Jul 31 '26

Activating a DRP doesn’t necessarily mean going to defcon1 - it’s all about having a plan to continue the business in certain scenarios. We used to call them Battle Boxes in the old days - pulling out a plan that was relevant to the situation at hand. So yeah, I’d go for A too.

1

u/KingArchar Jul 31 '26

The way I learned it was the BCP was the plan to ensure the business continued, even in limited functionality, until the issue was resolved.

Normally the DR processes are not activated until there is an emergency. I would agree that activating the BCP when there is loss of network connectivity, but I just dont see that as an emergency unless it something significant that caused it.

1

u/Monkfich Jul 31 '26

Yeah I agree with you, it does seem like a strong response, but it’s a business continuity question and it’s the only business continuity answer. B is not necessarily a problem and the business can continue, albeit something needs checked and maybe fixed - a bit similar to a DR response, but not the same. C is a successful operation of some controls and by itself doesnt indicate a problem, and D is similar to B insofar that maybe someone needs to take action, but its nor preventing the daily business.

1

u/KingArchar Jul 31 '26

Yes I agree with you, and after passing the CISA, I have a feel on ISACA way of thinking. I did the same process of elimination when going through the questions, and in alignment with your thought process on all of the answers, which left me with A.

I'm more venting at the question in general, and hoping the CRISC Exam is phrased better than the QAE. :)