BCP Testing, Maintenance, and Training EDRP Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A BCP test revealed that the crisis management team was unfamiliar with the new incident command structure, and the communication plan failed because the mass notification system had not been updated with new employee phone numbers. The BCP coordinator must decide how to prioritize improvements. Which action should be taken first?

   • ADocument both findings in the test report and create an action plan that addresses training and system updates
   • BUpdate the mass notification system with current employee phone numbers
   • CProvide refresher training on the incident command structure to the crisis management team
   • DRe-run the test immediately to see if the issues repeat
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A healthcare provider is required by regulation to test its BCP at least annually. The provider recently experienced a ransomware attack that disrupted patient records for two days. The BC manager wants to increase testing frequency to address the new risk. Which approach best balances regulatory compliance with the need for more frequent validation?

   • AWait until the next annual test to incorporate lessons learned
   • BPerform a tabletop exercise annually and a simulation test six months later
   • CReplace the annual test with a monthly plan review
   • DConduct a full interruption test quarterly and a tabletop exercise annually
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A mid-sized e-commerce company has a BCP that is tested annually with a tabletop exercise. After a recent cyberattack caused a 12-hour outage, the board asks for more rigorous testing. The IT team proposes a full interruption test, but the operations director warns that a full test could disrupt order processing during peak season. What is the most appropriate next step?

   • AIncrease test frequency and use a simulation test during off-peak hours
   • BPerform a walk-through drill instead of a simulation test
   • CConduct a full interruption test immediately to address the board's concern
   • DContinue with annual tabletop exercises because they are sufficient
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which activity helps foster a culture of preparedness?

   • AKeeping the BCP only in the hands of the CEO
   • BDiscouraging employees from asking questions about the BCP
   • CLimiting continuity discussions to the annual board meeting
   • DRegularly communicating the importance of continuity through newsletters and meetings
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is a key element of a BCP training program design?

   • ATailoring training to the specific roles and responsibilities of each participant
   • BOffering training only to senior management
   • CConducting training only after a disaster occurs
   • DProviding the same generic training to all employees regardless of role
   Reveal Solution Discussion Select an answer first