Business Continuity and Disaster Recovery CCT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of business continuity planning (BCP) in an organization?

   • ATo transfer all business risks to third-party insurance providers
   • BTo eliminate all risks and prevent any disruption from occurring
   • CTo ensure that critical business functions can continue operating during and after a disruptive event
   • DTo restore IT systems and data to their pre-incident state as quickly as possible
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is the first step in developing a BCP/DRP plan?

   • AConducting a business impact analysis
   • BTesting the plan
   • CWriting the plan document
   • DAllocating resources
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An online payment processor has a customer transaction database. The business impact analysis determined that the maximum acceptable data loss is 5 minutes. The current backup strategy performs a full backup every night and transaction log backups every 15 minutes. The company is considering a new strategy. Which option meets the RPO?

   • AUse only full backups taken every 4 minutes.
   • BKeep the current strategy because the full backup ensures all data is captured.
   • CSwitch to transaction log backups every 5 minutes, with the full backup unchanged.
   • DIncrease the full backup frequency to every 6 hours and keep log backups every 15 minutes.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of a vulnerability that a risk assessment might identify?

   • AThe potential financial loss from a prolonged outage
   • BThe recovery time objective for a critical application
   • CA hurricane that could flood the data center
   • DA single point of failure in the network infrastructure
   Reveal Solution Discussion Select an answer first
6. 10application · hard

   A logistics company has a critical shipment-tracking application. The application must be available within 15 minutes of a failure, and no more than 1 minute of tracking data can be lost. The company is choosing between two architectures. Option 1: An active-passive pair in the same data center with automatic failover and synchronous data replication. Option 2: An active-passive pair in two different data centers with asynchronous replication and a 10-minute failover time. Which option should the company choose?

   • AOption 2, because it provides geographic redundancy and still meets the RTO and RPO.
   • BNeither option is acceptable because the RTO and RPO are too strict for any architecture.
   • COption 1, because synchronous replication ensures zero data loss and automatic failover meets the RTO.
   • DEither option is acceptable because both meet the stated RTO and RPO.
   Reveal Solution Discussion Select an answer first