What is the primary purpose of technology resilience in an organization?

To reduce the cost of IT infrastructure by consolidating servers

To eliminate all potential security threats before they occur

To ensure critical business functions continue operating during and after a disruption

To guarantee that no data is ever lost during any system failure

What is the primary purpose of escalation procedures in incident response and recovery coordination?

To ensure that incidents are reported to higher management or external authorities when they exceed certain thresholds

To document the incident for insurance claims

To automatically shut down all systems during any incident

To transfer all incident response activities to an external vendor

During a disaster recovery exercise, the incident commander notices that the recovery team is not following the communication plan. Team members are sending status updates directly to the CEO instead of through the designated incident commander. What is the MOST significant risk of this behavior?

The recovery team will become overloaded with work.

The CEO will have to make decisions without proper information.

The incident commander will lose authority over the recovery team.

The CEO will receive conflicting or incomplete information.

Which recovery objective is most directly related to the amount of data that can be lost during a disruption?

Business continuity objective (BCO)

Certified in Risk and Information Systems Control

Domain 4Objective 3

Resilience and Continuity CRISC Practice Questions (Page 4)

Part of the Domain 4: Technology and Security domain, which accounts for 20% of the CRISC exam.

27questions here

6free pages

7concepts

20%of the exam

Questions 16–20

16expert · medium
A company is conducting a BIA to prioritize recovery of its systems. The BIA team has identified the following systems and their maximum tolerable downtime (MTD): customer relationship management (CRM) - 8 hours, enterprise resource planning (ERP) - 4 hours, email - 24 hours, and file storage - 48 hours. The company has limited recovery resources and can only recover two systems simultaneously. Which two systems should be recovered FIRST?
Select an answer first
17foundation · easy
What is the primary purpose of technology resilience in an organization?
Select an answer first
18foundation · easy
What is the primary purpose of escalation procedures in incident response and recovery coordination?
Select an answer first
19expert · medium
During a disaster recovery exercise, the incident commander notices that the recovery team is not following the communication plan. Team members are sending status updates directly to the CEO instead of through the designated incident commander. What is the MOST significant risk of this behavior?
Select an answer first
20foundation · easy
Which recovery objective is most directly related to the amount of data that can be lost during a disruption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CRISC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CRISC” is a trademark of its owner, used for identification only.