A multinational corporation is conducting a BIA for its customer support center. The center operates 24/7 and handles calls from three regions. The BIA team has collected the following data: the support center's maximum tolerable downtime (MTD) is 8 hours, but the customer relationship management (CRM) system has a recovery time objective (RTO) of 4 hours. The CRM system is hosted in a single cloud region. The company's risk appetite is low, and the board has mandated that no single point of failure should exist for the CRM system. Which recovery strategy best satisfies the board's mandate while meeting the RTO?

Increase the RTO to 8 hours to match the MTD and keep the CRM system in a single region.

Deploy the CRM system in a second cloud region with active-active load balancing and automatic failover.

Accept the risk of a regional outage because the MTD is 8 hours and the RTO is 4 hours.

Implement a pilot light strategy in the same cloud region with daily snapshots.

A regional bank is conducting its BIA. The BIA team has identified that the wire-transfer processing function has a maximum tolerable downtime (MTD) of 2 hours and a recovery time objective (RTO) of 1 hour. The function depends on a legacy mainframe application that is only supported by two senior staff members. During the BIA workshop, the team realizes that the mainframe vendor's support contract expires in 6 months. Which action should the BIA team take to ensure the BIA remains accurate and actionable?

Immediately update the RTO to 4 hours to reflect the reduced supportability of the mainframe application.

Document the single point of failure for the mainframe application and recommend a strategy to cross-train additional staff before the support contract expires.

Remove the mainframe application from the BIA because it is legacy and will be replaced soon.

Escalate the support contract expiry directly to the vendor and request an extension before proceeding with the BIA.

Which of the following is an example of a vulnerability that a risk assessment might identify?

A competitor's new product launch

A single point of failure in the power supply

A hurricane in a coastal region

What is the primary purpose of Business Continuity Planning (BCP) in an organization?

To eliminate all possible risks to the organization's IT infrastructure

To ensure that critical business functions can continue or be restored within an acceptable timeframe after a disruption

To provide a detailed technical recovery plan for IT systems only

To transfer all operational risks to third-party vendors

What is the primary purpose of testing and exercising a BCP?

To replace the need for regular plan maintenance

To validate the effectiveness of the plan and identify gaps

To satisfy customer requirements for certifications

To train employees on new software applications

EC-CouncilDisaster Recovery Professional

Domain 3Objective 1

Business Continuity Planning (BCP) EDRP Practice Questions (Page 7)

Part of the Continuity and Recovery Planning domain, which makes up ~27% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~26–43 in this domain), expect 9–14 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 31–35

31expert · hard
A multinational corporation is conducting a BIA for its customer support center. The center operates 24/7 and handles calls from three regions. The BIA team has collected the following data: the support center's maximum tolerable downtime (MTD) is 8 hours, but the customer relationship management (CRM) system has a recovery time objective (RTO) of 4 hours. The CRM system is hosted in a single cloud region. The company's risk appetite is low, and the board has mandated that no single point of failure should exist for the CRM system. Which recovery strategy best satisfies the board's mandate while meeting the RTO?
Select an answer first
32application · medium
A regional bank is conducting its BIA. The BIA team has identified that the wire-transfer processing function has a maximum tolerable downtime (MTD) of 2 hours and a recovery time objective (RTO) of 1 hour. The function depends on a legacy mainframe application that is only supported by two senior staff members. During the BIA workshop, the team realizes that the mainframe vendor's support contract expires in 6 months. Which action should the BIA team take to ensure the BIA remains accurate and actionable?
Select an answer first
33foundation · easy
Which of the following is an example of a vulnerability that a risk assessment might identify?
Select an answer first
34foundation · easy
What is the primary purpose of Business Continuity Planning (BCP) in an organization?
Select an answer first
35foundation · easy
What is the primary purpose of testing and exercising a BCP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EDRP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EDRP” is a trademark of its owner, used for identification only.

Business Continuity Planning (BCP) EDRP Practice Questions (Page 7)

Questions 31–35

Which of the following is an example of a vulnerability that a risk assessment might identify?

What is the primary purpose of Business Continuity Planning (BCP) in an organization?

What is the primary purpose of testing and exercising a BCP?

Keep studying — Continuity and Recovery Planning