Business Continuity Management (BCM) EDRP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A utility company is developing a business continuity plan for its customer service call center. The BIA identified that the call center must be operational within 8 hours of a disruption. The plan must include clear procedures for activating the plan, contacting staff, and using an alternate site. What should the plan development team do to ensure the plan is actionable?

   • ADocument step-by-step activation procedures, staff call trees, and alternate site access instructions, and assign specific roles
   • BWrite a high-level summary of recovery objectives and store it in the corporate portal
   • CDevelop the plan after the next exercise to incorporate lessons learned
   • DInclude only the alternate site address and assume staff will know what to do
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A manufacturing company is establishing a BCM program. The CEO has approved the BCM policy and appointed a program manager. To ensure the program is sustained and embedded, which governance structure should the company put in place?

   • AAn external consultant who reviews the program once a year and submits a report to the CEO
   • BA cross-functional steering committee with executive sponsorship that meets regularly to review program status and approve major changes
   • CA temporary task force that develops the plan and then disbands
   • DA single business continuity coordinator who handles all planning and testing activities independently
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An e-commerce company has a BCM plan that assumes its primary cloud provider will remain available. A risk assessment reveals that the provider has experienced two regional outages in the past year. The BIA shows that the order processing function has a recovery time objective of 2 hours. The company has a limited budget and cannot afford a full active-active multi-cloud setup. Which strategy best addresses the risk while staying within budget?

   • AMove all workloads to a second provider immediately
   • BImplement a warm standby in a second cloud region with replicated data and automated failover for the order processing system
   • CPurchase additional insurance to cover revenue loss during an outage
   • DAccept the risk because the provider has a good track record overall
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A healthcare provider is drafting its BCM policy. The board wants the policy to clearly state the organization's commitment to patient safety and regulatory compliance, and to define who has authority to activate the plan. Which components should the policy include?

   • AA detailed list of recovery procedures for every department
   • BA statement of commitment, scope, roles and responsibilities, and activation authority
   • CA technical specification of backup servers and network configurations
   • DA financial budget for the next five years
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A retail company's BCM program has been in place for two years. The annual BCP test revealed that the contact list for the crisis management team is outdated, and the recovery procedure for the point-of-sale system no longer matches the current software version. What is the most appropriate action?

   • AUpdate the contact list and revise the recovery procedure, then schedule a follow-up test to verify the changes.
   • BAssign the IT team to update the procedures without involving the business units.
   • CDocument the issues in the test report and defer changes until the next annual test.
   • DReplace the entire BCP with a new plan to avoid incremental errors.
   Reveal Solution Discussion Select an answer first