Disaster Recovery Planning Process EDRP Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A bank has a DR plan that has been tested with tabletop exercises only. The bank's regulator now requires that the plan be validated with a more realistic test that includes actual failover of the core banking system. The bank has a secondary data center with a warm standby environment. What is the most appropriate type of test to conduct?

   • AA simulation test that uses a mock core banking system at the secondary data center.
   • BA parallel test that runs the core banking system at the secondary data center without shutting down the primary.
   • CA full-scale exercise that shuts down the primary data center and fails over to the secondary data center.
   • DA checklist review that verifies the DR plan documentation is complete.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A financial services firm is conducting a risk assessment for its DR planning. The firm has identified that its primary data center is located in a region prone to hurricanes. The firm also has a secondary data center in a different region that is not prone to hurricanes. The BIA has identified that the trading system has an RTO of 1 hour and an RPO of 5 minutes. Which of the following is the most appropriate risk mitigation strategy for the hurricane threat?

   • AMove the primary data center to a hurricane-proof building in the same region.
   • BAccept the risk because the secondary data center is in a different region.
   • CPurchase business interruption insurance to cover financial losses from a hurricane.
   • DImplement synchronous replication to the secondary data center and test failover procedures regularly.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A DR team is planning its annual test. The team has limited time and budget. The DR plan has not been tested since it was written two years ago, and the IT environment has changed significantly. Which testing approach is most appropriate?

   • ASkip testing this year because the environment has changed
   • BConduct a full-scale test immediately to validate the entire plan
   • CConduct a parallel test of a single system
   • DConduct a tabletop exercise to validate roles and procedures, then schedule a full-scale test for later
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary output of a Business Impact Analysis (BIA) in the context of disaster recovery planning?

   • AA step-by-step procedure for restoring systems after a disaster
   • BA list of all potential threats and vulnerabilities that could affect the organization
   • CAn identification of critical business functions and the quantified impact of their disruption
   • DA detailed inventory of all hardware and software assets in the organization
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A risk assessment for a bank's wire transfer system identifies a high likelihood of a cyberattack and a high impact on customer trust. The system is protected by a firewall but lacks intrusion detection. The bank has a DR plan that includes a hot site. What should the bank do to reduce the risk?

   • AIncrease the RTO for the wire transfer system
   • BRely on the hot site to recover from any attack
   • CAccept the risk because the hot site is in place
   • DDeploy an intrusion detection system (IDS) and update the DR plan to include cyberattack scenarios
   Reveal Solution Discussion Select an answer first