Contingency Planning CCOA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which element is typically included in a Continuity of Operations Plan (COOP)?

   • AProcedures for forensic analysis of cyberattacks
   • BA detailed list of all software vulnerabilities
   • CDelegation of authority to key personnel during a disruption
   • DA schedule for patching operating systems
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of conducting a risk assessment as part of contingency planning?

   • ATo assign a monetary value to every asset in the organization
   • BTo identify and prioritize risks to assets so that planning efforts focus on the most significant threats
   • CTo guarantee that all risks are eliminated before a disruption occurs
   • DTo document all past security incidents for legal purposes
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which metric is commonly used in a Business Impact Analysis to indicate the maximum tolerable downtime for a business function?

   • ARecovery Time Objective (RTO)
   • BMean Time Between Failures (MTBF)
   • CAnnualized Rate of Occurrence (ARO)
   • DRecovery Point Objective (RPO)
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company's contingency plan is reviewed annually. This year, the review coincides with a major merger that will double the company's workforce and add new business units. The current plan is based on the old organizational structure. What is the most appropriate approach to plan maintenance?

   • ADefer the review until after the merger is fully integrated to avoid confusion.
   • BConduct a comprehensive review and update of the plan to reflect the new organizational structure and business units.
   • CPerform a minor update to the contact lists and keep the rest of the plan unchanged.
   • DConduct a tabletop exercise to test the current plan and identify gaps before updating.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A manufacturing company's incident response plan includes procedures for containing a malware outbreak. The COOP requires the production scheduling system to remain available. During a malware incident, the incident response team wants to disconnect the production scheduling system from the network to prevent spread. What is the best course of action?

   • AIgnore the incident response plan and focus solely on maintaining production.
   • BKeep the production scheduling system online and monitor it for malware activity.
   • CShut down the production scheduling system and halt production until the malware is eradicated.
   • DIsolate the production scheduling system and activate the COOP's alternate procedures for manual scheduling.
   Reveal Solution Discussion Select an answer first