Business Continuity Planning (BCP) EDRP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A multinational corporation operates a data center in a region prone to earthquakes. The BCP team has identified the earthquake threat and is evaluating two risk mitigation strategies: (1) reinforce the building to withstand a magnitude 7.0 earthquake, or (2) implement real-time data replication to a secondary site in another region. The company's BIA shows an RPO of 15 minutes and an RTO of 4 hours for its order-processing system. Which strategy should the team choose?

   • AImplement real-time replication to a secondary site, because it directly meets the RPO and RTO
   • BReinforce the building, because it addresses the root cause of the threat
   • CAccept the risk, because earthquakes are unpredictable
   • DDo both, because they address different aspects of the risk
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which statement best describes the scope of Business Continuity Planning (BCP)?

   • AIt deals only with natural disasters and not with cyber incidents
   • BIt addresses the continuity of critical business processes, people, facilities, and technology
   • CIt focuses exclusively on restoring IT systems and data after a disaster
   • DIt is a one-time project to create a document for compliance purposes
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A hospital is developing recovery strategies for its patient management system. The BIA has determined that the system has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 5 minutes. The hospital has a limited budget and cannot afford a fully redundant hot site. The IT team is considering two options: (1) a warm site with hourly log shipping, or (2) a cloud-based disaster recovery as a service (DRaaS) with continuous replication. Which option best meets the RTO and RPO while considering the budget constraint?

   • AUse the warm site with hourly log shipping, because it is more cost-effective.
   • BAccept a longer RPO of 60 minutes to use the warm site, because the budget is limited.
   • CUse the warm site but increase log shipping frequency to every 5 minutes.
   • DUse the cloud-based DRaaS with continuous replication, because it can meet the 5-minute RPO and 1-hour RTO.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A healthcare provider's BIA shows that its patient portal has an RTO of 8 hours and an RPO of 1 hour. The current infrastructure is a single data center with nightly backups. The BCP team is evaluating recovery strategies. Which strategy would best meet the RTO and RPO while minimizing cost?

   • AUse a cloud-based disaster recovery site with hourly replication and automated failover
   • BUse tape backups shipped offsite daily
   • CImplement synchronous replication to a second data center
   • DMaintain nightly backups and restore to new hardware at a cold site
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A retail company has a BCP that was tested six months ago with a full-scale simulation. Since then, the company has migrated its e-commerce platform to a new cloud provider and hired a new disaster recovery coordinator. The BCP team is planning the next exercise. What should they do first?

   • APerform a business impact analysis again to confirm the RTOs
   • BSchedule a maintenance review for the end of the fiscal year
   • CUpdate the BCP to reflect the new cloud provider and personnel, then conduct a tabletop exercise
   • DConduct a full-scale simulation immediately to test the new cloud environment
   Reveal Solution Discussion Select an answer first