Contingency Planning CCOA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of contingency planning in an organization?

   • ATo ensure business continuity by preparing for and responding to disruptions
   • BTo document past incidents for regulatory compliance only
   • CTo transfer all operational risks to third-party vendors
   • DTo eliminate all possible risks to the organization's assets
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A manufacturing company's disaster recovery plan was written three years ago. Since then, the company migrated its ERP system to a cloud provider and decommissioned the on-premises data center. The plan still references the old data center. What is the most important action to take?

   • AConduct a full-scale exercise to test the old plan before making changes.
   • BKeep the old plan as a historical reference and create a new plan from scratch.
   • CUpdate the disaster recovery plan to reflect the cloud-based ERP and remove references to the decommissioned data center.
   • DArchive the old plan and rely on the cloud provider's disaster recovery services.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a risk assessment, what does the term 'likelihood' refer to?

   • AThe probability that a specific threat will occur
   • BThe potential financial loss if a threat occurs
   • CThe number of vulnerabilities in a system
   • DThe speed at which an organization can recover from a threat
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which activity is typically part of incident response, as opposed to disaster recovery?

   • AActivating an alternate data center
   • BConducting a business impact analysis
   • CRestoring data from backup tapes
   • DContaining the spread of a malware infection
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization's disaster recovery plan includes a recovery time objective (RTO) of 4 hours for its customer relationship management (CRM) system. During a recent test, the restoration took 6 hours. What is the most appropriate action?

   • AIncrease the RTO to 6 hours to align with the actual restoration time.
   • BDocument the test as successful because the system was restored.
   • CConduct another test immediately to confirm the result.
   • DAnalyze the test results to identify bottlenecks and update the recovery procedures to meet the RTO.
   Reveal Solution Discussion Select an answer first