Business Continuity and Disaster Recovery CCT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A multinational corporation has a data center in a region prone to earthquakes. The risk assessment identified that an earthquake could destroy the data center. The corporation's BIA determined that the customer relationship management (CRM) system has an RTO of 8 hours and an RPO of 4 hours. The corporation is considering two strategies: A) Replicate the CRM to a cloud provider in a different continent with asynchronous replication. B) Maintain a warm standby site in a neighboring country with nightly backups. Which strategy is more appropriate, and why?

   • ABoth strategies are equally appropriate because they both provide off-site recovery.
   • BStrategy B, because nightly backups are simpler and cheaper, and the warm site can be ready within 8 hours.
   • CNeither strategy is appropriate because an earthquake could affect both the primary and recovery sites.
   • DStrategy A, because cloud replication provides geographic separation and asynchronous replication can meet the RPO of 4 hours.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An e-commerce company has a transaction database with an RTO of 2 hours and an RPO of 15 minutes. The current backup solution performs nightly full backups and hourly transaction log backups, with a tested restore time of 3 hours. The company is evaluating new strategies. Which strategy best meets both objectives?

   • AImplement database mirroring to a standby server in the same data center, with automatic failover.
   • BUse a cold site with off-site tapes and a documented recovery procedure.
   • CDeploy a warm standby server in a different region with log shipping every 10 minutes and a tested failover time of 90 minutes.
   • DIncrease the frequency of transaction log backups to every 10 minutes and keep the current restore process.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A manufacturing company's enterprise resource planning (ERP) system goes down due to a ransomware attack. The incident response team confirms that the ERP system is critical and the business continuity plan (BCP) must be activated. The BCP designates the CIO as the incident commander. The CIO is on a flight and unreachable for the next six hours. The BCP includes a chain of succession. According to the BCP, who should activate the plan?

   • AThe next designated person in the chain of succession, such as the deputy CIO.
   • BThe IT help desk manager, because they are on site and can make decisions.
   • CThe external incident response vendor, because they are contracted to handle the incident.
   • DThe CIO's executive assistant, because they know the CIO's schedule.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What does the recovery point objective (RPO) define?

   • AThe maximum acceptable amount of data loss measured in time
   • BThe minimum amount of data that must be backed up
   • CThe time required to restore data from backups
   • DThe maximum acceptable downtime for a business function
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A manufacturing company has a disaster recovery plan that was written two years ago. Since then, the company moved its ERP system to a new cloud provider and changed its backup procedures. The plan has not been updated. During a scheduled test, the recovery team follows the old plan and fails to restore the ERP system. What is the most important lesson from this test?

   • ACloud providers are inherently unreliable, so the company should move back to on-premises systems.
   • BThe recovery team should be replaced because they failed to execute the plan correctly.
   • CThe plan must be reviewed and updated whenever significant infrastructure changes occur.
   • DTesting is unnecessary if the plan is documented thoroughly.
   Reveal Solution Discussion Select an answer first