Business Continuity Planning (BCP) EDRP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services firm has a BCP that was last updated 18 months ago. Since then, the company has acquired a smaller firm, migrated its email system to a new cloud provider, and changed its incident response team structure. The BCP manager is planning the annual maintenance cycle. What is the most important first step?

   • AConduct a comprehensive review of the BCP to identify outdated information and align it with the current organizational structure and systems.
   • BWait for the next major incident to see how the plan performs before making changes.
   • CUpdate only the contact list and email system details, since those are the most obvious changes.
   • DSchedule a full-scale exercise to test the plan as-is, because the annual exercise is due.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A manufacturing company's BIA shows that its order-entry system has an RTO of 4 hours and an RPO of 15 minutes. The current backup solution replicates data every 24 hours. The BCP team is selecting a recovery strategy. Which strategy best meets the stated recovery requirements?

   • AUse daily tape backups and ship them to an offsite vault
   • BImplement synchronous replication to a hot standby site and test failover quarterly
   • CDeploy a warm site with 4-hour-old replicated data
   • DIncrease backup frequency to every 2 hours and store at a cold site
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A logistics company's BCP includes a quarterly review process. During the last review, the team discovered that the contact information for the third-party cold-storage vendor was outdated, and the vendor had changed its service-level agreement (SLA) for emergency access. What is the most appropriate action for the BCP team?

   • ARemove the cold-storage vendor from the BCP because the SLA changed
   • BNote the changes in the review minutes and defer updates to the next annual revision
   • CUpdate the BCP with the new contact details and SLA terms, then verify the changes with a short exercise
   • DContact the vendor to request the original SLA terms be reinstated
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A government agency has a BCP that has never been tested. The BCP manager has budget for one exercise this year. The agency's leadership wants to validate the plan's feasibility without disrupting operations. Which type of exercise is most appropriate?

   • AA full-scale exercise that includes activating the alternate site and failing over systems.
   • BA tabletop exercise where key personnel discuss their roles and decisions in a simulated scenario.
   • CA walkthrough drill that physically moves staff to the alternate site.
   • DA simulation exercise that tests the technical recovery procedures in a test environment.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A retail company is documenting its BCP. The plan includes a section for emergency response procedures, but the BCP manager realizes that the plan does not specify who is responsible for declaring a disaster and activating the plan. What is the most important addition to the BCP documentation?

   • AA clear chain of command with named roles and alternates for disaster declaration and plan activation.
   • BA schedule for annual testing of the BCP.
   • CA detailed list of all IT systems and their recovery priorities.
   • DA communication plan with contact numbers for all employees.
   Reveal Solution Discussion Select an answer first