A hospital's BCP team has just completed a tabletop exercise for a cyberattack scenario. The exercise revealed that the IT team did not know who had the authority to activate the BCP and that the communication plan listed outdated contact numbers. What should the BCP team do next?

Archive the exercise results and move on because tabletop exercises are only for awareness.

Conduct a full-scale exercise immediately to test the entire plan under realistic conditions.

Update the BCP documentation to clarify the activation authority and correct the contact information, then schedule a follow-up exercise.

Replace the BCP team because they failed to maintain the plan.

A media company is developing recovery strategies for its video streaming platform. The BIA has determined that the platform has a recovery time objective (RTO) of 15 minutes and a recovery point objective (RPO) of 1 minute. The platform is hosted on a public cloud and uses a content delivery network (CDN). The company's budget is limited, and the platform's revenue is highly dependent on availability. Which recovery strategy is most appropriate?

Use a single cloud region with hourly snapshots and a documented recovery runbook.

Accept a longer RPO of 60 minutes to reduce costs.

Implement an active-active deployment across two cloud regions with continuous data replication and automatic DNS failover.

Rely on the CDN to serve cached content during an outage.

A logistics company is conducting a BIA. The BIA team has identified that the order-tracking system has a high financial impact if disrupted, but the system's dependency on a third-party API has a history of outages. The company's risk appetite is low. Which BIA output is most critical for developing an appropriate recovery strategy?

A risk register that ranks the third-party API outage as a high risk.

A list of all third-party dependencies and their historical outage durations.

A recommendation to replace the third-party API with an in-house solution.

A quantified impact statement that includes the cost of downtime per hour and the maximum tolerable downtime for the order-tracking system.

A utility company is conducting a BIA for its customer billing system. The BIA team interviews department heads and collects data on the system's dependencies, including a mainframe that is no longer supported by the vendor. The team is now quantifying the impact of losing the billing system for one week. Which BIA component should they use to capture the financial loss from delayed billing?

Threat and vulnerability assessment

EC-CouncilDisaster Recovery Professional

Domain 3Objective 1

Business Continuity Planning (BCP) EDRP Practice Questions (Page 8)

Part of the Continuity and Recovery Planning domain, which makes up ~27% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~26–43 in this domain), expect 9–14 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 36–40

36foundation · easy
In the BCP lifecycle, which phase typically comes immediately after 'Project Initiation'?
Select an answer first
37application · medium
A hospital's BCP team has just completed a tabletop exercise for a cyberattack scenario. The exercise revealed that the IT team did not know who had the authority to activate the BCP and that the communication plan listed outdated contact numbers. What should the BCP team do next?
Select an answer first
38expert · hard
A media company is developing recovery strategies for its video streaming platform. The BIA has determined that the platform has a recovery time objective (RTO) of 15 minutes and a recovery point objective (RPO) of 1 minute. The platform is hosted on a public cloud and uses a content delivery network (CDN). The company's budget is limited, and the platform's revenue is highly dependent on availability. Which recovery strategy is most appropriate?
Select an answer first
39application · medium
A logistics company is conducting a BIA. The BIA team has identified that the order-tracking system has a high financial impact if disrupted, but the system's dependency on a third-party API has a history of outages. The company's risk appetite is low. Which BIA output is most critical for developing an appropriate recovery strategy?
Select an answer first
40application · medium
A utility company is conducting a BIA for its customer billing system. The BIA team interviews department heads and collects data on the system's dependencies, including a mainframe that is no longer supported by the vendor. The team is now quantifying the impact of losing the billing system for one week. Which BIA component should they use to capture the financial loss from delayed billing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EDRP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EDRP” is a trademark of its owner, used for identification only.

Business Continuity Planning (BCP) EDRP Practice Questions (Page 8)

Questions 36–40

In the BCP lifecycle, which phase typically comes immediately after 'Project Initiation'?

A hospital's BCP team has just completed a tabletop exercise for a cyberattack scenario. The exercise revealed that the IT team did not know who had the authority to activate the BCP and that the communication plan listed outdated contact numbers. What should the BCP team do next?

Keep studying — Continuity and Recovery Planning