Contingency Planning CCOA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An organization conducts a full-scale exercise of its COOP. During the exercise, it is discovered that the alternate site's communication systems are incompatible with the primary site's systems, causing delays in coordination. The exercise also reveals that some essential staff are not trained on the alternate site's procedures. What is the most appropriate follow-up action?

   • AUpdate the COOP to include communication interoperability procedures and schedule training for essential staff.
   • BReplace the alternate site with a new one that has compatible communication systems.
   • CConduct another full-scale exercise immediately to test the communication systems again.
   • DDocument the exercise as successful because the essential functions were maintained.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   During a security incident, an organization's incident response team discovers that the attacker has gained access to the backup server and encrypted the backups. The disaster recovery plan relies on these backups for restoration. The COOP requires the order management system to remain available. What is the most appropriate immediate action?

   • AShut down the order management system to prevent further data loss.
   • BActivate the COOP to switch order management to the alternate site while the incident response team investigates the backup compromise.
   • CAttempt to restore the order management system from the encrypted backups.
   • DContact the attacker to negotiate the decryption key.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of conducting tests and exercises for contingency plans?

   • ATo validate the effectiveness of the plans and identify gaps
   • BTo satisfy legal requirements only
   • CTo assign blame for plan failures
   • DTo guarantee that no future disruptions will occur
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A small e-commerce company is prioritizing its contingency planning efforts. The risk assessment shows a high likelihood of a distributed denial-of-service (DDoS) attack on its website, which is its primary revenue source. The business impact analysis indicates that 1 hour of website downtime costs $50,000. Which risk treatment strategy is most appropriate?

   • AImplement a DDoS mitigation service and develop a response procedure to activate it during an attack.
   • BTransfer the risk by purchasing cyber insurance to cover the revenue loss.
   • CAccept the risk because DDoS attacks are common and mitigation is expensive.
   • DAvoid the risk by taking the website offline during peak hours.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A utility company has a continuity of operations plan that includes a full-scale exercise every two years. After a recent organizational restructuring, several key personnel changed roles. What is the most appropriate way to ensure the plan remains effective?

   • AWait for the next scheduled full-scale exercise to test the plan with the new personnel.
   • BUpdate the plan's contact lists but do not test it until the next scheduled exercise.
   • CReplace the full-scale exercise with a checklist review to save time and resources.
   • DConduct a tabletop exercise sooner to validate the plan with the new personnel and update contact lists.
   Reveal Solution Discussion Select an answer first