Business Continuity and Disaster Recovery CND Practice Questions (Page 12)

Questions 56–59

1. 56expert · hard

   A city's public transit authority is conducting a BIA. The BIA team has identified three systems: the ticketing system (RTO 2 hours, RPO 15 minutes), the employee payroll system (RTO 24 hours, RPO 24 hours), and the public website (RTO 4 hours, RPO 1 hour). The authority has a limited budget and can only fund enhanced redundancy for one system. Which system should receive the enhanced redundancy first?

   • AThe ticketing system, because it has the shortest RTO and RPO, indicating the highest criticality
   • BAll three systems equally, because all are critical
   • CThe public website, because it is customer-facing
   • DThe payroll system, because payroll affects employee morale
   Reveal Solution Discussion Select an answer first
2. 57expert · hard

   A financial trading firm has an RTO of 30 minutes and an RPO of zero for its trading platform. The firm is evaluating alternate site options. Which site strategy can meet these requirements, and what is the key trade-off?

   • AHot site with synchronous replication; high cost and complexity
   • BWarm site with asynchronous replication; lower cost but may lose some data
   • CHot site with asynchronous replication; moderate cost but may lose recent transactions
   • DCold site with daily tape backups; lowest cost but long recovery time
   Reveal Solution Discussion Select an answer first
4. 58foundation · easy

   What is the purpose of a risk assessment in the context of BCP/DRP?

   • ATo assign blame for past incidents
   • BTo calculate the exact cost of every business process
   • CTo ensure compliance with all industry regulations
   • DTo identify threats, vulnerabilities, and the likelihood of disasters affecting business continuity
   Reveal Solution Discussion Select an answer first
5. 59foundation · easy

   Which output is typically produced by a business impact analysis (BIA)?

   • AA network diagram of the organization's infrastructure
   • BA prioritized list of critical business functions and their recovery requirements
   • CA list of all hardware and software assets
   • DA detailed incident response playbook
   Reveal Solution Discussion Select an answer first