Business Continuity and Disaster Recovery CCT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What does the recovery time objective (RTO) define?

   • AThe maximum acceptable downtime for a business function after a disruption
   • BThe total cost of recovering from a disaster
   • CThe maximum amount of data loss that is acceptable
   • DThe minimum amount of time required to test the recovery plan
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A financial services firm's trading platform has an RTO of 15 minutes and an RPO of 5 minutes. The platform is hosted on virtual machines in a single data center. The firm's risk assessment identifies a regional outage as a credible threat. The firm is evaluating recovery strategies. Which strategy best meets the RTO and RPO requirements?

   • AAsynchronous replication to a co-location facility in the same city.
   • BSynchronous replication to a warm standby site in a different region, with automated failover.
   • CA pilot light strategy with data replication and manual startup of servers.
   • DDaily off-site backups with manual restoration to a cold site.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A hospital's electronic health record (EHR) system is down due to a ransomware attack. The hospital's business continuity plan (BCP) is activated. The BCP includes a communication protocol that requires the incident commander to notify the hospital's public relations (PR) department before any external communication. The PR department is currently drafting a press release. The incident commander receives a call from a local news outlet asking about the outage. What should the incident commander do?

   • AAsk the news outlet to call back later, after the incident is resolved.
   • BRefer the news outlet to the PR department, which will provide an approved statement.
   • CTell the news outlet that the system is down and will be restored soon, without further details.
   • DProvide the news outlet with a detailed technical explanation of the ransomware attack.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare provider has a disaster recovery plan that was tested six months ago with a tabletop exercise. Since then, the provider migrated its patient portal to a new cloud vendor and changed its backup encryption keys. The plan has not been updated. What is the most appropriate next step?

   • AConduct a full-scale test of the updated plan to validate the changes.
   • BCancel future tests because the plan is already documented.
   • COnly update the plan's contact list and leave the technical procedures unchanged.
   • DWait until the next annual test to avoid disrupting operations.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a key component of a business impact analysis (BIA)?

   • AConfiguring firewalls and intrusion detection systems
   • BTraining employees on emergency evacuation procedures
   • CSelecting backup software for data replication
   • DIdentifying critical business functions and their dependencies
   Reveal Solution Discussion Select an answer first