Change Management, Version Control, and Disaster Recovery CCISO Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company is evaluating DR strategies. The business requires an RTO of 2 hours and an RPO of 30 minutes for its customer database. The database is 500 GB and changes frequently. The company has a moderate budget. Which strategy is most appropriate?

   • AHot site with synchronous replication
   • BCold site with nightly backups
   • CWarm site with log shipping or frequent incremental backups
   • DBackup to tape and store offsite
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company is implementing a new change management process. The CISO wants to ensure that changes to the DR plan are also managed through the same process. Which approach best integrates change management with DR planning?

   • AKeep DR plan updates separate from the change management process to avoid delays.
   • BAllow DR plan updates to be made directly by the DR coordinator without review.
   • CTreat DR plan updates as standard changes that require CAB approval and version control.
   • DOnly update the DR plan after a disaster occurs.
   Reveal Solution Discussion Select an answer first
4. 33application · medium · select all that apply

   A change request for a new intrusion detection system (IDS) is being prepared. Which of the following must be included in the change request documentation? (Select all that apply.)

   • AThe personal phone numbers of all CAB members
   • BA rollback plan
   • CAn impact assessment
   • DA detailed implementation plan
   • EThe name of the change requestor
   Check answers Discussion Select an answer first
5. 34application · medium

   An organization is evaluating disaster recovery strategies for its critical applications. The applications have an RTO of 2 hours and an RPO of 30 minutes. The organization has a limited budget and wants to minimize ongoing costs while still meeting the recovery objectives. Which disaster recovery strategy is most appropriate?

   • AA warm site with replicated data and pre-configured systems that can be activated within the RTO.
   • BA cold site with only basic infrastructure and no pre-configured systems.
   • CA backup-only strategy that restores systems from tape backups at a recovery facility.
   • DA hot site with fully redundant systems and real-time data replication.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is updating its disaster recovery plan to include the latest changes to its IT infrastructure. The change management process requires that all infrastructure changes be documented and approved. How does the change management process support the disaster recovery plan?

   • ABy ensuring that the disaster recovery plan is updated to reflect approved changes to the infrastructure.
   • BBy ensuring that all changes are reversible and can be rolled back during a disaster.
   • CBy providing a backup of all configuration files that can be used for recovery.
   • DBy guaranteeing that no changes are made to the infrastructure without prior approval.
   Reveal Solution Discussion Select an answer first