Business Continuity and Disaster Recovery CND Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An online payment processor has an RTO of 1 hour and an RPO of 0 minutes (zero data loss) for its transaction database. The current backup strategy uses a full backup every 6 hours and ships backup tapes to a remote vault daily. The IT team is evaluating whether to implement synchronous replication to a hot site. Which factor is most critical in deciding whether synchronous replication can meet the RPO?

   • AThe network latency between the primary and hot sites must be low enough to avoid impacting transaction response times.
   • BThe backup tapes must be shipped to the hot site more frequently to reduce data loss.
   • CThe hot site must be staffed 24/7 to ensure immediate failover.
   • DThe hot site must have identical hardware to the primary site to ensure compatibility.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A hospital's DR plan has been validated through tabletop exercises, but the IT director is concerned that the plan has never been tested with actual systems. The hospital has a 4-hour RTO for its EHR system. The IT director schedules a full-scale test that will fail over to the warm site. During the test, the EHR system is restored in 3.5 hours, but the test reveals that the clinical staff cannot access the system because their workstations are not configured to connect to the warm site's network. What is the most significant issue revealed by this test?

   • AThe RTO of 4 hours was not met because the total recovery time exceeded the target.
   • BThe warm site is not adequately equipped to support the EHR system.
   • CThe tabletop exercises were ineffective and should not have been conducted.
   • DThe DR plan lacks detailed procedures for reconfiguring end-user workstations to access the alternate site.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why must BCP/DRP consider regulatory and compliance requirements?

   • ATo ensure that recovery plans meet legal obligations for data protection and availability
   • BTo avoid all types of disasters
   • CTo reduce the cost of backup storage
   • DTo eliminate the need for risk assessments
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What should BCP/DRP documentation include?

   • AThe organization's marketing strategy
   • BOnly the names of the board members
   • CDetailed procedures, contact lists, and resource requirements
   • DA list of all employee salaries
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A multinational bank is developing its BCP/DRP. The bank operates in the European Union and must comply with GDPR. The bank's BIA identifies that customer transaction data is critical. Which requirement must the BCP/DRP explicitly address to maintain GDPR compliance?

   • AEnsuring that recovery procedures maintain the confidentiality, integrity, and availability of personal data.
   • BUsing only on-premises backup storage to avoid cloud compliance issues.
   • CStoring all backup data exclusively within the same EU member state.
   • DDeleting all customer data from backups after 30 days.
   Reveal Solution Discussion Select an answer first