Resilience and Continuity CRISC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a disaster recovery plan that has been validated through tabletop exercises. Management now wants to test the actual failover capability of the systems. Which of the following testing methods would provide the HIGHEST level of assurance that the recovery plan works?

   • AA simulation test that mimics a cyberattack
   • BFull-scale test that fails over production systems to the alternate site
   • CA parallel test that runs the recovery site in a sandbox
   • DAnother tabletop exercise with more participants
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What does the recovery time objective (RTO) define?

   • AThe maximum acceptable amount of data loss measured in time
   • BThe minimum amount of time required to test a disaster recovery plan
   • CThe maximum acceptable downtime for a system or process after a disruption
   • DThe total cost associated with recovering from a disaster
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A company's disaster response plan assigns the role of 'communications lead' to the IT director. During a disaster, the IT director is on a plane and unreachable. The plan does not specify an alternate for this role. What is the MOST appropriate immediate action?

   • AThe incident commander should assume the communications lead role temporarily.
   • BCancel the disaster response until the IT director is available.
   • CHave the PR officer take over the communications lead role.
   • DWait for the IT director to land and take over the role.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's core application is hosted on a single server in a local data center. The application has an RTO of 4 hours and an RPO of 1 hour. Management wants to improve technology resilience without significant capital expenditure. Which of the following is the MOST cost-effective approach?

   • APurchase a second server and configure it as a hot standby in the same data center
   • BImplement a backup solution that replicates data to a cloud storage service every hour
   • CAccept the current risk and do nothing
   • DMove the application to a public cloud provider with auto-scaling
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's RTO is 2 hours and RPO is 15 minutes. The current disaster recovery solution uses a warm site with daily backups. The backups take 3 hours to restore. Which of the following changes would MOST effectively bring the solution into compliance with the recovery objectives?

   • ASwitch to a cold site and increase backup frequency to every 12 hours
   • BImplement continuous data replication to the warm site and automate the restoration process
   • CKeep the warm site but perform backups every 6 hours
   • DAccept the current solution and document the risk
   Reveal Solution Discussion Select an answer first