Business Continuity and Disaster Recovery CCT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is it important to regularly test a BCP/DRP plan?

   • ATo identify gaps and ensure the plan works as intended
   • BTo reduce the cost of the plan
   • CTo guarantee that no disruptions will occur
   • DTo satisfy insurance requirements only
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail chain's corporate office is destroyed by a fire. The company's IT systems are hosted in a cloud provider, and the staff can work remotely. The company's business continuity plan (BCP) includes procedures for relocating staff to a temporary office and communicating with customers. The disaster recovery plan (DRP) includes procedures for restoring the IT systems from backups. Which statement best describes the relationship between the BCP and the DRP in this scenario?

   • AThe BCP is only for natural disasters, while the DRP is for cyber incidents.
   • BThe BCP focuses on keeping the business operating (staff relocation, customer communication), while the DRP focuses on restoring IT systems.
   • CThe DRP is a subset of the BCP and is only activated after the BCP is fully executed.
   • DThe BCP and DRP are interchangeable terms for the same plan.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A utility company has a business continuity plan that includes a communication protocol. During a severe storm, the company's main office loses power and internet connectivity. The plan designates a backup communication method. Which method is most appropriate for the company to use to coordinate with its emergency response team?

   • ALandline phones in the office.
   • BEmail through the company's on-premises mail server.
   • CA group chat on the company's internal messaging platform.
   • DSatellite phones provided to key team members.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A global online retailer's order processing system has an RTO of 1 hour and an RPO of 15 minutes. The system is deployed in a single cloud region. The retailer's risk assessment identifies a regional cloud outage as a credible threat. The cloud provider offers the following options: (1) a multi-region active-active deployment with synchronous replication, which doubles the infrastructure cost; (2) a multi-region active-passive deployment with asynchronous replication and automated failover, which increases cost by 40%; (3) a single-region deployment with hourly backups, which has no additional cost. The retailer's budget is constrained, but the RTO and RPO are contractual obligations. Which option should the retailer choose?

   • AMulti-region active-active with synchronous replication, because it is the only option that can meet the RPO.
   • BMulti-region active-passive with asynchronous replication and automated failover, because it meets the RTO and RPO at a lower cost than active-active.
   • CSingle-region with hourly backups, because it is the cheapest and the RPO is not a hard requirement.
   • DMulti-region active-active with synchronous replication, because it meets the RTO and RPO and provides the highest availability.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A financial services firm has a BCP that designates a specific incident commander and a communication tree. During a ransomware incident, the incident commander is unreachable. The firm's plan does not specify a backup commander. Employees are unsure who to contact, and the response is delayed. What should the firm do to improve its plan?

   • AWait until the incident commander becomes available before activating the plan.
   • BRely on the IT manager to take over informally during emergencies.
   • CDesignate a deputy incident commander and include the succession in the plan.
   • DRemove the incident commander role to avoid confusion.
   Reveal Solution Discussion Select an answer first