Introduction to Disaster Recovery and Business Continuity EDRP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which regulation is specifically focused on the protection of personal data and includes requirements for breach notification?

   • ANIST SP 800-34
   • BPCI DSS
   • CGDPR
   • DISO 22301
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A multinational corporation is updating its BC/DR plans to comply with GDPR. The company's data protection officer (DPO) is concerned about data residency requirements for personal data stored in the EU. Which action best addresses the regulatory requirement while maintaining an effective BC/DR strategy?

   • AExclude personal data from the DR plan to avoid regulatory issues.
   • BStore all personal data in the cloud, as cloud providers are automatically compliant with GDPR.
   • CEnsure that the DR site for EU personal data is located within the EU or a country with equivalent data protection laws.
   • DUse a DR site in the US, as GDPR does not apply to data stored outside the EU.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A healthcare provider is updating its BC/DR plans. The BC plan includes procedures for patient appointment rescheduling and communication with staff. The DR plan includes restoring the electronic health record system and failover to a secondary data center. Which scenario best illustrates the difference between BC and DR?

   • AA pandemic triggers the BC plan for remote work, while the DR plan is not applicable because there is no IT failure.
   • BA cyberattack triggers the DR plan to restore data, while the BC plan is not needed because the attack only affects IT.
   • CA power outage triggers the BC plan to relocate staff, while the DR plan is only activated if the BC plan fails.
   • DA fire in the data center triggers the DR plan to restore IT systems, while the BC plan ensures patient care continues through manual processes.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   During a major IT outage, the incident commander declares a disaster and activates the BC/DR plan. The IT team is focused on restoring the core ERP system. Meanwhile, the customer service manager wants to know when they can resume taking orders. Who is primarily responsible for coordinating the business continuity response and communicating with business units?

   • AThe ERP system administrator.
   • BThe business continuity coordinator or emergency operations center (EOC) leader.
   • CThe IT help desk manager.
   • DThe chief financial officer.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A retail company has a BC plan that includes procedures for operating from a temporary location during a disaster. The DR plan includes restoring the point-of-sale (POS) system from backups. During a fire, the temporary location is activated, but the POS system cannot be restored because the backups are stored in the same building. Which statement best describes the failure in this scenario?

   • AThe failure is due to the emergency response team, who should have evacuated the backups before the fire.
   • BThe BC plan was effective, but the DR plan failed because the backups were not stored offsite, which is a DR planning failure.
   • CThe DR plan was effective, but the BC plan failed because the temporary location was not ready.
   • DBoth plans failed because the fire was not anticipated in the risk assessment.
   Reveal Solution Discussion Select an answer first