Business Continuity and Disaster Recovery CND Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which activity is a core component of business continuity planning?

   • AInstalling antivirus software on all endpoints
   • BConducting a business impact analysis to identify critical functions
   • CPerforming a forensic analysis of a security breach
   • DConfiguring firewall rules for network segmentation
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A software company's BCP team is performing a risk assessment. They have identified that a key developer is the only person who knows how to maintain a critical legacy system. What type of risk does this represent, and what is the best mitigation?

   • ALow-likelihood risk; accept it because the developer is unlikely to leave
   • BCompliance risk; report the situation to the regulatory authority
   • CNatural disaster risk; purchase insurance to cover the loss of the developer
   • DSingle point of failure; cross-train another developer and document the system's maintenance procedures
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is a benefit of integrating incident response with BCP/DRP?

   • AElimination of the need for risk assessments
   • BReduced need for backup systems
   • CImproved communication between technical and business teams during a crisis
   • DGuaranteed prevention of all cyberattacks
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A hospital's BCP/DRP team has just completed a tabletop exercise where participants walked through a ransomware scenario. The exercise revealed that the IT help desk did not know the correct order for notifying the incident response team versus the disaster recovery team. According to best practice, what should the team do next to address this finding?

   • AReplace the help desk staff with personnel who have more experience with ransomware incidents
   • BUpdate the incident response and BCP/DRP documentation to clarify notification triggers and escalation paths, then schedule a follow-up exercise
   • CIgnore the finding because tabletop exercises are only for discussion and do not require follow-up actions
   • DImmediately conduct a full-scale disaster recovery test to verify the help desk's response
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   In a risk assessment for BCP/DRP, what does 'likelihood' refer to?

   • AThe number of critical business functions
   • BThe probability that a specific threat will occur
   • CThe potential financial loss from a disaster
   • DThe time required to recover from a disaster
   Reveal Solution Discussion Select an answer first