Business Continuity and Disaster Recovery CND Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A university is implementing its new BCP. The plan assigns the IT director as the incident commander, the facilities manager as the emergency response coordinator, and the communications officer as the public information officer. Which additional implementation step is essential to ensure the plan works when a real disaster occurs?

   • AWait until a disaster occurs to test the plan for the first time
   • BConduct role-specific training and a notification drill for all assigned personnel
   • CAssign all roles to a single person to simplify decision-making
   • DPublish the plan on the public website so all stakeholders can review it
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which statement accurately describes the relationship between disaster recovery planning (DRP) and business continuity planning (BCP)?

   • AThey are independent plans that address different types of disasters
   • BBCP is a component of DRP that focuses on business processes
   • CDRP is a component of BCP that focuses on IT recovery
   • DThey are interchangeable terms for the same plan
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A logistics company is performing a risk assessment for its BCP. The company's primary warehouse is in a flood-prone area. The BIA shows that losing the warehouse for more than 3 days would cause unacceptable revenue loss. The risk assessment team has identified flood as a high-likelihood, high-impact threat. Which strategy would best reduce the risk to an acceptable level while balancing cost?

   • ABuild a cold site in a different state and plan to move equipment there after a flood
   • BPurchase flood insurance and continue operations without any alternate site
   • CImplement a warm standby warehouse in a nearby non-flood-prone location with pre-positioned essential equipment
   • DAccept the risk because floods are unpredictable and no cost-effective mitigation exists
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the primary purpose of a business impact analysis (BIA)?

   • ATo determine the root cause of a security incident
   • BTo select a cloud service provider for backup
   • CTo test the effectiveness of the disaster recovery plan
   • DTo identify critical business functions and quantify the impact of disruptions
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A retail company has a BCP that focuses on keeping the online store operational during a regional power outage. The BCP includes procedures for shifting traffic to a secondary hosting provider. The company also has a DRP that details how to restore the inventory database from backups at the secondary site. During a recent incident, the online store remained operational, but the inventory database was corrupted and needed restoration. Which statement best describes the relationship between the BCP and DRP in this incident?

   • AThe BCP kept the store running, and the DRP restored the database; both plans worked together to maintain operations and recover data.
   • BThe BCP was sufficient because the store stayed operational, and the DRP was unnecessary.
   • CThe DRP should have prevented the database corruption, so the BCP was not needed.
   • DThe BCP and DRP are the same plan and should be combined into one document.
   Reveal Solution Discussion Select an answer first