Contingency Planning CCOA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following best describes the scope of contingency planning?

   • AIt is a one-time effort to create a plan document
   • BIt is primarily concerned with financial risk management
   • CIt encompasses preparation, response, and recovery for various disruptions
   • DIt focuses solely on IT system recovery after a disaster
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which metric is most directly associated with a Disaster Recovery Plan (DRP)?

   • AMean Time to Repair (MTTR)
   • BAnnualized Loss Expectancy (ALE)
   • CService Level Agreement (SLA)
   • DRecovery Point Objective (RPO)
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A retail company's disaster recovery plan includes a recovery point objective (RPO) of 1 hour for its inventory database. The database is backed up every 4 hours. During a recent test, the restoration took 3 hours, which is within the RTO. What is the most appropriate action?

   • AChange the RPO to 4 hours to align with the backup frequency.
   • BIncrease the backup frequency to meet the RPO of 1 hour.
   • CConduct another test to confirm the restoration time before making changes.
   • DAccept the current backup frequency because the RTO is met.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the main objective of a Business Impact Analysis (BIA)?

   • ATo identify and quantify the impact of disruptions on critical business functions
   • BTo create a detailed list of all security vulnerabilities
   • CTo determine the exact cost of every asset in the organization
   • DTo assign blame for past operational failures
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital's contingency plan includes procedures for maintaining patient care during a cyberattack. The incident response plan focuses on eradicating the threat, while the COOP focuses on continuing essential functions. During a ransomware attack, the incident response team wants to shut down all systems to contain the threat, but the COOP requires the patient monitoring system to remain operational. What is the best way to resolve this conflict?

   • AActivate the COOP to run patient monitoring from a segregated network while the incident response team contains the attack.
   • BDelay any action until the executive team decides which plan takes precedence.
   • CFollow the COOP and keep all systems running to ensure patient care continues.
   • DFollow the incident response plan and shut down all systems, including patient monitoring.
   Reveal Solution Discussion Select an answer first