Business Continuity and Disaster Recovery CND Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A manufacturing company has just activated its emergency response plan after a fire in the server room. The crisis management team needs to communicate with employees, customers, and the media. Which communication strategy should the team follow to ensure consistent and accurate messaging?

   • AWait until the full impact assessment is complete before sending any communication
   • BPost all updates on the company's public website before notifying employees
   • CUse a single designated spokesperson for external communications and a separate internal notification system for employees
   • DAllow any manager to speak to the media to provide quick updates
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to integrate incident response procedures with BCP/DRP?

   • ATo eliminate the need for separate incident response plans
   • BTo transfer all incident response responsibilities to external agencies
   • CTo ensure that all incidents are handled by the BCP team
   • DTo ensure a coordinated and efficient response during emergencies
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of a communication and notification plan in BCP/DRP?

   • ATo provide a list of all IT assets
   • BTo assign blame for the disruption
   • CTo ensure that stakeholders, employees, and customers are informed during a disruption
   • DTo document the root cause of the disaster
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A hospital is performing a risk assessment for its BCP. The hospital's patient records system is critical, and the BIA identified that a 1-hour outage could endanger patient safety. The risk assessment team is evaluating threats. Which threat should be prioritized as having the highest risk?

   • AA fire in the server room, which has a low likelihood but a very high impact on patient safety.
   • BA power outage in the area, which has a high likelihood but a moderate impact because backup generators exist.
   • CA staff shortage, which has a high likelihood but a low impact because other staff can cover.
   • DA ransomware attack, which has a medium likelihood and a high impact on data availability.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is training important for BCP/DRP?

   • ATo ensure that all personnel understand their roles and responsibilities during a disruption
   • BTo reduce the cost of backup solutions
   • CTo satisfy insurance requirements only
   • DTo eliminate the need for testing the plan
   Reveal Solution Discussion Select an answer first