Business Continuity and Disaster Recovery CND Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which alternate site type is fully equipped and ready to take over operations immediately?

   • AHot site
   • BWarm site
   • CCold site
   • DMobile site
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   If an organization performs hourly backups and can tolerate losing up to one hour of data, what is the Recovery Point Objective (RPO)?

   • A1 hour
   • BThe time to restore the backup
   • C24 hours
   • D0 hours
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A healthcare provider is subject to HIPAA, which requires that electronic protected health information (ePHI) be backed up and recoverable. The provider's BIA identifies the patient portal as a critical system with an RTO of 4 hours and an RPO of 30 minutes. The provider is considering a cloud-based backup service. Which additional consideration is most important for regulatory compliance?

   • AChoose the lowest-cost cloud provider regardless of security features
   • BSet the RPO to 4 hours to match the RTO and simplify the backup schedule
   • CEnsure the cloud provider signs a business associate agreement (BAA) and the backup data is encrypted in transit and at rest
   • DStore backups only on-premises to avoid any cloud compliance issues
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What does the Recovery Time Objective (RTO) define?

   • AThe maximum amount of data loss that is acceptable
   • BThe total cost of downtime per hour
   • CThe maximum acceptable time to restore a system or process after a disruption
   • DThe minimum amount of data that must be backed up
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A financial services firm must recover its trading platform within 2 hours of a disaster and lose no more than 15 minutes of transactions. The firm has a secondary site 500 miles away with fully configured servers, current applications, and live data replication from the primary site. The secondary site's staff can begin operations immediately after activation. Which alternate site strategy does this configuration represent, and what is the primary trade-off the firm accepted?

   • AHot site; lower cost than a cold site due to shared infrastructure
   • BHot site; higher ongoing cost for continuous replication and readiness
   • CWarm site; moderate cost with some data loss possible
   • DCold site; lowest cost but longest recovery time
   Reveal Solution Discussion Select an answer first