Business Continuity and Disaster Recovery CND Practice Questions (Page 6)

Questions 26–30

1. 26expert · medium

   A company has completed its BCP/DRP documentation and conducted initial training. The plan includes a full-scale test scheduled for next quarter. The IT manager wants to validate that the documented recovery procedures actually work before the full-scale test. Which type of test should the IT manager conduct first?

   • AA checklist review where the IT manager verifies that all equipment is inventoried.
   • BA simulation test where a mock disaster is presented and teams respond using the plan.
   • CA full-scale test at the alternate site with actual systems and personnel.
   • DA tabletop exercise where key personnel walk through the plan step-by-step in a meeting room.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A bank's crisis management team is activating the communication plan after a data breach. The plan includes a call tree for employees, a customer notification template, and a media statement. Which step should the team take FIRST?

   • ASend the media statement to all news outlets immediately
   • BWait for the legal team to complete a full investigation before notifying anyone
   • CPost the customer notification template on the bank's website
   • DActivate the call tree to notify key internal stakeholders and the incident response team
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which strategy is commonly used to ensure business continuity by maintaining a secondary location that can take over operations?

   • ASite redundancy
   • BNetwork monitoring
   • CPatch management
   • DData encryption
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A retail chain's BCP focuses on keeping stores open and serving customers during a regional power outage. The DRP focuses on restoring the IT systems in the data center. Which statement best describes the relationship between the BCP and the DRP in this context?

   • ABCP and DRP are identical plans with different names
   • BBCP is only for natural disasters, while DRP is only for cyber incidents
   • CThe DRP is the overarching plan, and the BCP is a component that focuses on restoring IT systems
   • DThe BCP is the overarching plan for maintaining business operations, and the DRP is a component that focuses on restoring IT systems
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company's BCP/DRP has not been tested in three years. Management wants to validate the plan with minimal disruption to daily operations. Which testing method is most appropriate for this initial validation?

   • AConduct a tabletop exercise with key stakeholders to walk through the plan's procedures
   • BTest only the backup restoration process without involving other teams
   • CPerform a full-scale test that shuts down the primary data center
   • DSkip testing and rely on the plan's documentation
   Reveal Solution Discussion Select an answer first