Business Continuity and Disaster Recovery CCT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the context of BCP/DRP, what is the role of a risk assessment?

   • ATo assign recovery teams and their responsibilities
   • BTo determine the maximum acceptable downtime for each business function
   • CTo identify potential threats and vulnerabilities that could disrupt business operations
   • DTo develop procedures for restoring IT systems
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A mid-sized e-commerce company has a disaster recovery plan that was written two years ago. Since then, the company migrated its order database to a new cloud provider and changed its payment processing vendor. The plan still references the old on-premises database server and the previous vendor's contact numbers. During a scheduled tabletop exercise, the incident commander discovers that the plan's activation steps do not match the current environment. What is the most appropriate immediate action?

   • AUpdate the plan to reflect the current database and vendor information, then schedule a full-scale exercise to validate the changes.
   • BContinue the exercise using the old plan to see how team members handle outdated information.
   • CCancel the exercise and rewrite the entire plan from scratch because the environment changed.
   • DDocument the discrepancies in the exercise report and defer updates until the next annual review.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which communication protocol is essential during a BCP/DRP incident?

   • ACommunicating only after the incident is resolved
   • BSharing all technical details with the public
   • CProviding regular status updates to stakeholders
   • DAvoiding communication to prevent panic
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A hospital is updating its business continuity plan. The risk assessment identified that the regional power grid is unreliable, with frequent short outages. The hospital's electronic health record (EHR) system runs on servers in the building. The BIA classified the EHR as a critical function with an RTO of 1 hour. Which strategy is most appropriate to address the identified risk?

   • AMove the EHR system to a cloud provider in another country to avoid local power issues.
   • BDevelop a manual paper-based process for patient records during outages.
   • CInstall an uninterruptible power supply (UPS) and a backup generator for the server room.
   • DIncrease the frequency of off-site backups to every 30 minutes.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A logistics company is conducting a risk assessment for its package tracking system. The system is hosted on a single server in a local data center. The risk assessment team identifies a list of threats, including a fire in the data center, a ransomware attack, and a prolonged internet outage. The team also notes that the server has no redundant power supply. Which of the following best describes how the risk assessment contributes to the business continuity planning (BCP) process?

   • AIt provides a list of all hardware and software assets in the company.
   • BIt calculates the exact financial loss that would result from each threat.
   • CIt determines the recovery time objective (RTO) for the tracking system.
   • DIt identifies the specific threats and vulnerabilities that could disrupt the tracking system, which informs the selection of mitigation strategies.
   Reveal Solution Discussion Select an answer first