Introduction to Disaster Recovery and Business Continuity EDRP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital's BIA identifies its electronic health record (EHR) system as having a Maximum Tolerable Downtime (MTD) of 4 hours. The current backup strategy takes 3 hours to restore, and the IT team can failover to a secondary site in 1 hour. What is the relationship between the RTO, RPO, and MTD in this scenario?

   • AThe RTO is the maximum data loss in hours, and the RPO is the time to restore the system, so both must be less than the MTD.
   • BThe RTO is the same as the MTD, and the RPO is the time it takes to restore the data from backups.
   • CThe RTO must be less than the MTD, and the RPO is the maximum age of data that can be lost, which is independent of the MTD.
   • DThe MTD is the sum of the RTO and RPO, and the RPO is the time to failover to the secondary site.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which disaster type is most likely to cause a prolonged power outage affecting a wide geographic area?

   • AA malware infection on a single workstation
   • BA hurricane making landfall
   • CAn accidental deletion of a database
   • DA localized server room fire
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is updating its BC/DR plan. The CEO wants to ensure that the plan is aligned with the organization's strategic objectives. The IT director wants to focus on technical recovery procedures. The HR manager wants to ensure employee safety is addressed. Which stakeholder is ultimately responsible for approving the BC/DR plan and ensuring it has adequate resources?

   • AThe BC/DR coordinator.
   • BThe HR manager.
   • CThe IT director.
   • DThe CEO or senior executive management.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A regional bank has completed a BIA that identifies its online banking platform as a critical system with an RTO of 2 hours and an RPO of 15 minutes. The bank's BC plan includes procedures for relocating staff to an alternate site, while the DR plan contains technical runbooks for failing over the platform. During a regional power outage, the bank activates both plans. Which statement best describes the relationship between the BC and DR plans in this scenario?

   • AThe DR plan is a subset of the BC plan, focused specifically on restoring the online banking platform's IT systems and data to meet the stated RTO and RPO.
   • BThe BC and DR plans are independent and are activated separately, with the BC plan handling staff and the DR plan handling technology with no overlap.
   • CThe BC plan is a subset of the DR plan, because the technical failover of the platform is the primary driver for all other continuity activities.
   • DThe BC plan is activated first to relocate staff, and the DR plan is only activated if the BC plan fails to restore operations within the RTO.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm is subject to regulations that require it to maintain and test its disaster recovery plan annually. The firm's compliance officer wants to ensure that the DR plan also aligns with the business continuity objectives. Which action best satisfies both regulatory and business continuity requirements?

   • APerform a DR test only on the IT systems, as the regulation does not require testing of business processes.
   • BDocument the DR plan but do not test it, as testing is optional under the regulation.
   • CConduct an annual DR test that includes business continuity scenarios, such as alternate site activation and staff relocation.
   • DOutsource the DR test to a third party and rely on their report to satisfy both regulatory and BC requirements.
   Reveal Solution Discussion Select an answer first