Introduction to Disaster Recovery and Business Continuity EDRP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the first step in the BC/DR planning process?

   • AConduct a Business Impact Analysis (BIA)
   • BTest the plan
   • CDevelop recovery strategies
   • DPerform a risk assessment
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has a BIA that identifies a critical application with an RTO of 2 hours and an RPO of 30 minutes. The IT team proposes a solution that can restore the application in 1 hour with 15 minutes of data loss. The cost of this solution is 30% higher than a solution that meets the RTO/RPO exactly. The CFO questions the need for the higher-cost solution. What is the best justification for the higher-cost solution?

   • AIt guarantees that the application will never experience downtime.
   • BIt is required by industry regulations.
   • CIt provides a safety margin that accounts for unexpected delays during recovery.
   • DIt reduces the need for regular testing of the DR plan.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is an example of a human-caused disaster?

   • AHurricane
   • BFlood
   • CRansomware attack
   • DEarthquake
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A healthcare provider is subject to HIPAA and must ensure that protected health information (PHI) is backed up and recoverable. The provider is considering a cloud-based DR solution. The cloud provider offers encryption at rest and in transit, but the provider's data center is located in a country that is not approved by the provider's legal team. What is the most appropriate course of action?

   • AUse the cloud provider anyway, because encryption satisfies HIPAA requirements.
   • BSign a business associate agreement (BAA) with the cloud provider, and ignore the location issue.
   • CChoose a cloud provider with data centers in an approved jurisdiction, even if it costs more.
   • DStore PHI only on-premises to avoid all compliance issues.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A government agency is developing a BC/DR plan. The agency has completed the risk assessment and BIA, and has identified that its citizen services portal must be restored within 2 hours (RTO) with no more than 15 minutes of data loss (RPO). The agency is also subject to regulations that require annual testing of the plan. Which step should the agency take next in the planning process?

   • AImmediately implement the plan by purchasing new servers and software.
   • BDocument the plan without developing strategies, as the RTO and RPO are already defined.
   • CConduct the annual test to ensure the plan meets the RTO and RPO.
   • DDevelop recovery strategies, such as redundant systems and frequent data replication, to meet the RTO and RPO.
   Reveal Solution Discussion Select an answer first