A financial services firm is developing a disaster recovery plan. The business impact analysis shows that the trading platform has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 15 minutes. The risk assessment identifies a cyberattack as the most likely threat. Which recovery strategy best meets these requirements?

Maintain a hot standby site with synchronous data replication and automated failover.

Rely on the cloud provider's default backup and restore service without additional configuration.

Use a warm site with hourly backups and manual restoration procedures.

Implement a cold site and ship backups from the primary site daily.

A regional hospital is updating its contingency plan. The business impact analysis identified that the electronic health record (EHR) system has a maximum tolerable downtime of 2 hours, while the patient portal can be down for 48 hours. The risk assessment shows a high likelihood of regional power outages. Which approach best aligns the continuity strategy with these findings?

Implement a redundant, auto-failover EHR system with an on-site generator, and accept the risk for the patient portal.

Outsource the EHR to a cloud provider and discontinue the patient portal during disruptions.

Focus all resources on preventing power outages by installing multiple generators for the entire facility.

Deploy identical redundancy for both EHR and patient portal to ensure uniform availability.

A logistics company is conducting a business impact analysis. The BIA team is evaluating the impact of a disruption to the package tracking system. Which metric is most relevant for determining the recovery priority?

The number of users who access the tracking system daily.

The cost of the tracking system's hardware and software licenses.

Maximum tolerable downtime (MTD) for the tracking system.

The age of the tracking system's hardware.

What is the role of incident response procedures within contingency planning?

To address immediate threats and minimize damage during an incident

To restore IT systems to full functionality after a disaster

To test contingency plans through exercises

To conduct business impact analysis for critical functions

Why is it important to regularly review and update contingency plans?

To reflect changes in the organization's environment, such as new systems or personnel

To increase the complexity of the plans

To ensure the plans are never changed

To satisfy auditors without any real benefit

Certified Cybersecurity Operations Analyst

Domain 5Objective 1

Contingency Planning CCOA Practice Questions (Page 6)

Part of the Domain 5: Securing Assets domain, which accounts for 11% of the CCOA exam. ISACA does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

11%of the exam

Questions 26–30

26application · medium
A financial services firm is developing a disaster recovery plan. The business impact analysis shows that the trading platform has a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 15 minutes. The risk assessment identifies a cyberattack as the most likely threat. Which recovery strategy best meets these requirements?
Select an answer first
27application · medium
A regional hospital is updating its contingency plan. The business impact analysis identified that the electronic health record (EHR) system has a maximum tolerable downtime of 2 hours, while the patient portal can be down for 48 hours. The risk assessment shows a high likelihood of regional power outages. Which approach best aligns the continuity strategy with these findings?
Select an answer first
28application · medium
A logistics company is conducting a business impact analysis. The BIA team is evaluating the impact of a disruption to the package tracking system. Which metric is most relevant for determining the recovery priority?
Select an answer first
29foundation · easy
What is the role of incident response procedures within contingency planning?
Select an answer first
30foundation · easy
Why is it important to regularly review and update contingency plans?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCOA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCOA” is a trademark of its owner, used for identification only.

Contingency Planning CCOA Practice Questions (Page 6)

Questions 26–30

A logistics company is conducting a business impact analysis. The BIA team is evaluating the impact of a disruption to the package tracking system. Which metric is most relevant for determining the recovery priority?

What is the role of incident response procedures within contingency planning?

Why is it important to regularly review and update contingency plans?

Keep studying — Domain 5: Securing Assets