Resilience and Continuity CRISC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   During a ransomware incident, the incident response team has successfully contained the threat and is now restoring systems from backups. The CEO has requested a status update. According to best practices, who should provide the update to the CEO?

   • AThe public relations officer
   • BThe incident commander
   • CThe backup administrator
   • DThe IT help desk manager
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which type of disaster recovery test involves a discussion-based walkthrough of the plan without actually executing recovery procedures?

   • ATabletop exercise
   • BParallel test
   • CSimulation test
   • DFull-scale test
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of communication protocols in a disaster response plan?

   • ATo replace the need for a business continuity plan
   • BTo ensure that all stakeholders receive timely and accurate information during a disaster
   • CTo document all decisions made during the disaster for legal purposes
   • DTo provide a platform for employees to share personal updates on social media
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following best describes technology resilience?

   • AThe process of identifying and assessing risks to technology assets
   • BThe implementation of security controls to prevent unauthorized access to systems
   • CThe ability of an organization to adapt to market changes and customer demands
   • DThe capacity of technology systems to continue operating or recover quickly during and after a disruption
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's disaster response plan includes a call tree for notifying key personnel. During a recent fire in the server room, the first person on the call tree did not answer their phone. According to best practices, what should the caller do NEXT?

   • AAbort the notification process and handle the incident alone
   • BContinue down the call tree to the next person on the list
   • CLeave a voicemail and wait for a callback
   • DAssume the person is unavailable and escalate to the incident commander
   Reveal Solution Discussion Select an answer first