Disaster Recovery Planning Process EDRP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a common source of input for updating a disaster recovery plan during continuous improvement?

   • ALessons learned from DR plan tests and actual incidents
   • BRandom changes to the plan to keep it fresh
   • CThe personal preferences of the DR plan author
   • DThe marketing department's new advertising campaign
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is it important to regularly maintain and update a disaster recovery plan?

   • ATo increase the cost of disaster recovery
   • BTo ensure that the plan is never tested again
   • CTo satisfy employee requests for more paperwork
   • DTo reflect changes in the organization, such as new systems, personnel, or processes
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital's DR team is conducting a risk assessment for its electronic health records (EHR) system. The team identifies ransomware as a high-likelihood threat, a single-factor authentication vulnerability, and a 12-hour RTO. The hospital has an offline backup stored in a different building. Which risk treatment should the team prioritize?

   • APurchase cyber insurance to cover potential losses
   • BMove the offline backup to a geographically separate location
   • CReduce the RTO to 4 hours
   • DImplement multi-factor authentication (MFA) for all EHR access
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A large enterprise has a DR plan that is documented in a series of Word documents stored on a shared drive. The plan is updated annually, but the last update was 18 months ago. The company has recently acquired a new subsidiary, and the DR plan does not include the subsidiary's systems. The DR coordinator is tasked with updating the plan. What is the most important action to take?

   • AUpdate the DR plan to include the subsidiary's systems, starting with a BIA to identify critical functions and recovery objectives.
   • BAdd the subsidiary's systems to the DR plan with default RTO and RPO values.
   • CConduct a BIA for the subsidiary's systems to determine their RTO and RPO.
   • DSchedule a full-scale exercise to test the DR plan with the subsidiary's systems.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which sequence correctly represents the typical phases of the disaster recovery planning process?

   • APlan documentation, business impact analysis, risk assessment, strategy development, testing, maintenance
   • BBusiness impact analysis, risk assessment, strategy development, plan documentation, testing, maintenance
   • CRisk assessment, business impact analysis, strategy development, plan documentation, testing, maintenance
   • DStrategy development, business impact analysis, risk assessment, plan documentation, testing, maintenance
   Reveal Solution Discussion Select an answer first