Business Continuity Planning (BCP) EDRP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In the context of Business Continuity Planning, what is the primary purpose of a risk assessment?

   • ATo determine the financial value of each business asset
   • BTo design specific countermeasures for every identified risk
   • CTo assign recovery priorities to each business function
   • DTo identify threats and vulnerabilities that could disrupt business operations
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A manufacturing company's BCP was tested six months ago, and the test revealed that the backup generator failed to start. The generator was repaired, but the BCP manager has not updated the plan or scheduled a re-test. What is the most appropriate action for the BCP manager?

   • ADocument the failure in the test report but do not update the BCP.
   • BRemove the generator from the BCP because it is unreliable.
   • CAssume the generator repair is sufficient and wait for the next annual test.
   • DUpdate the BCP to document the generator failure and the repair, and schedule a re-test to confirm the fix.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which type of BCP exercise involves a discussion-based session where participants walk through a simulated scenario in a low-stress environment?

   • AFull-scale simulation
   • BChecklist review
   • CParallel test
   • DTabletop exercise
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A hospital's BCP team is assessing risks to its electronic health record (EHR) system. They identify a regional power grid failure as a credible threat. The hospital has backup generators, but they only fuel the data center for 6 hours. The team is now deciding whether to invest in additional fuel contracts or a secondary data center. Which risk assessment output should they use to justify this investment decision?

   • AA list of all identified vulnerabilities in the EHR application
   • BAnnualized Loss Expectancy (ALE) for the EHR system
   • CThe Recovery Point Objective (RPO) for the EHR database
   • DThe Business Impact Analysis (BIA) questionnaire results
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A new BCP manager is joining a company that has an existing BCP. The manager wants to understand the current state of the plan and its alignment with the business. Which BCP lifecycle phase should the manager initiate first?

   • ARisk assessment, to identify threats and vulnerabilities.
   • BPlan testing and exercising, to validate the existing plan.
   • CProgram initiation and management, to establish the scope, objectives, and governance for reviewing the existing plan.
   • DBusiness impact analysis, to identify critical functions and their recovery requirements.
   Reveal Solution Discussion Select an answer first