Explain the Importance of Disaster Recovery and Business Continuity Planning 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A hospital has a disaster recovery plan that restores the electronic health record (EHR) system within two hours. The business continuity plan includes manual patient registration and paper charting. During a cyberattack, the EHR is encrypted, but the hospital continues to admit patients using paper charts. The IT team restores the EHR from backups in 90 minutes. Which statement best describes the relationship between the BCP and DRP in this scenario?

   • AThe DRP was unnecessary because the BCP kept the hospital running
   • BThe BCP kept patient care operational while the DRP restored the EHR
   • CThe BCP should have been activated only after the DRP failed
   • DThe BCP and DRP are interchangeable in this scenario
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail company has a business continuity plan that includes procedures for operating its point-of-sale (POS) system using manual credit card imprinters during a network outage. The disaster recovery plan includes steps to restore the network and POS servers. Which statement best describes the difference between these two plans?

   • AThe BCP is only for natural disasters, while the DRP is only for cyberattacks.
   • BThe BCP is more important than the DRP because it keeps the business running.
   • CThe BCP focuses on maintaining sales operations, while the DRP focuses on restoring the IT infrastructure.
   • DThe DRP is a subset of the BCP and is only activated after the BCP fails.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of a disaster recovery plan (DRP)?

   • ATo ensure employees are safe during an emergency
   • BTo restore IT infrastructure and systems after a disaster
   • CTo maintain critical business functions during a disruption
   • DTo prevent all disasters from occurring
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the purpose of a detective disaster recovery control?

   • ATo restore operations after a disaster has occurred
   • BTo transfer the risk of a disaster to a third party
   • CTo prevent disasters from occurring in the first place
   • DTo detect disasters or disruptions early so that response can begin quickly
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A hospital's IT team is designing a disaster recovery strategy for its electronic health record (EHR) system. The system must be available within 15 minutes of a failure. The team has a limited budget and must choose between redundant servers with automatic failover and a monitoring system that alerts staff to failures. Which approach best meets the requirement?

   • AImplement monitoring and a backup strategy with daily full backups
   • BImplement redundant servers without monitoring, and rely on periodic manual checks
   • CImplement monitoring only, and rely on staff to manually switch to a backup server
   • DImplement redundant servers with automatic failover, and use monitoring to verify failover readiness
   Reveal Solution Discussion Select an answer first