nerdexam
Isaca

CRISC · Question #233

A failed IT system upgrade project has resulted in the corruption of an organization's asset inventory database. Which of the following controls BEST mitigates the impact of this incident?

The correct answer is D. Backups. For an asset inventory database corrupted by a failed IT system upgrade, data backups are the most effective control to mitigate the impact by restoring the data.

Submitted by eva_at· Apr 18, 2026Risk Response and Reporting

Question

A failed IT system upgrade project has resulted in the corruption of an organization's asset inventory database. Which of the following controls BEST mitigates the impact of this incident?

Options

  • AEncryption
  • BAuthentication
  • CConfiguration
  • DBackups

How the community answered

(30 responses)
  • A
    3% (1)
  • C
    7% (2)
  • D
    90% (27)

Why each option

For an asset inventory database corrupted by a failed IT system upgrade, data backups are the most effective control to mitigate the impact by restoring the data.

AEncryption

Encryption protects data confidentiality but does not prevent or recover from data corruption.

BAuthentication

Authentication controls access to the system but does not prevent or recover from data corruption once access is granted.

CConfiguration

Configuration management helps prevent issues by ensuring systems are set up correctly, but it doesn't directly mitigate the impact of corruption once it has already occurred.

DBackupsCorrect

Backups provide a copy of data at a specific point in time, enabling recovery of corrupted or lost information by restoring the database from a healthy snapshot. This directly mitigates the impact of data corruption by ensuring business continuity and data integrity.

Concept tested: Data recovery controls

Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/backup-restore

Topics

#Data Recovery#Backups#Incident Response#Mitigation Controls

Community Discussion

No community discussion yet for this question.

Full CRISC Practice