Explain the Importance of Disaster Recovery and Business Continuity Planning 100-160 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A hospital's business continuity plan includes procedures for continuing patient care during a power outage. The disaster recovery plan covers restoring the electronic health record system. During a city-wide blackout, the hospital activates both plans. Which scenario best illustrates the difference between the two plans?

   • AThe BCP restores the EHR while the DRP provides manual patient registration
   • BBoth plans focus on restoring the EHR as quickly as possible
   • CThe BCP is activated only after the DRP fails
   • DThe BCP directs staff to use paper charts while the DRP restores the EHR from backups
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A hospital's business continuity plan (BCP) states that during a cyberattack that disables the electronic health record (EHR) system, the hospital will switch to paper charts and manual patient tracking. The disaster recovery plan (DRP) separately details how to restore the EHR system from backups. Which statement best explains why both plans are necessary?

   • AThe BCP ensures patient care continues while the DRP focuses on restoring the IT system.
   • BThe DRP is more important than the BCP because IT systems are critical.
   • CThe BCP is only needed for natural disasters, while the DRP is only for cyberattacks.
   • DThe BCP replaces the DRP because manual processes are sufficient.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is concerned about the risk of a disgruntled employee intentionally deleting critical files. Which control is most directly a preventive control for this human-caused threat?

   • AInstall an intrusion detection system on the network.
   • BConduct regular backups of critical files.
   • CEnable audit logging on file servers.
   • DImplement role-based access control (RBAC) with least privilege.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why are off-site backups considered a preventive disaster recovery control?

   • AThey reduce the impact of a disaster by ensuring data is available even if the primary site is destroyed
   • BThey prevent the disaster from occurring in the first place
   • CThey detect when a disaster is about to occur
   • DThey restore operations immediately after a disaster
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company's disaster recovery plan has a recovery time objective (RTO) of 4 hours and a recovery point objective (RPO) of 6 hours. The company performs a full backup every night and stores it off-site. During a ransomware attack, the backups are also encrypted. The company discovers that the off-site backup storage was accessible from the production network. Which change should be made to the backup strategy?

   • AReduce the RPO to 1 hour
   • BIncrease the frequency of full backups to every 12 hours
   • CMove backups to a different folder on the same server
   • DImplement immutable or air-gapped backups that cannot be modified or deleted from the production network
   Reveal Solution Discussion Select an answer first