Why is it important to maintain and update a BC/DR plan?

To satisfy regulatory requirements only

To ensure the plan remains aligned with current business needs and cloud environment

To increase the frequency of backups

To reduce the cost of cloud services

A company's BC/DR plan was created two years ago. Since then, the company has migrated to a new cloud provider and changed its application architecture. The plan has not been updated. What should the company do to ensure the plan remains effective?

Create a new plan from scratch without reviewing the old one.

Continue using the existing plan because the recovery goals are the same.

Only update the contact information in the plan.

Review and update the plan to reflect the new provider, architecture, and any changes in RTO/RPO.

A healthcare organization runs a critical application in a single cloud region. The application has an RTO of 1 hour and an RPO of 15 minutes. The organization wants to minimize complexity and cost while meeting these targets. Which strategy should the organization implement?

Use a manual process to export the database to a storage bucket and import it into a new environment after an outage.

Configure continuous replication of the database to a secondary region and automate failover of the application to that region.

Deploy the application in a second region but only take daily snapshots of the database.

Perform nightly backups of the database and restore them in the same region after an outage.

Which statement correctly defines the Recovery Point Objective (RPO)?

The minimum amount of data that must be backed up daily

The maximum acceptable time to restore a system after a disaster

The maximum acceptable amount of data loss, measured in time, after a disaster

The time required to test the disaster recovery plan

Why is it important to include cloud-specific considerations in a BC/DR plan?

Because cloud providers are always responsible for all recovery

Because cloud-specific considerations are only relevant for public clouds

Because cloud services may have different recovery capabilities and dependencies

Because cloud services never fail

Certified Cloud Security Professional

Domain 3Objective 5

Plan Business Continuity (BC) and Disaster Recovery (DR) CCSP Practice Questions (Page 2)

Part of the Cloud Platform and Infrastructure Security domain, which accounts for 17% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

8concepts

17%of the exam

Questions 6–10

6foundation · easy
Why is it important to maintain and update a BC/DR plan?
Select an answer first
7application · medium
A company's BC/DR plan was created two years ago. Since then, the company has migrated to a new cloud provider and changed its application architecture. The plan has not been updated. What should the company do to ensure the plan remains effective?
Select an answer first
8application · medium
A healthcare organization runs a critical application in a single cloud region. The application has an RTO of 1 hour and an RPO of 15 minutes. The organization wants to minimize complexity and cost while meeting these targets. Which strategy should the organization implement?
Select an answer first
9foundation · easy
Which statement correctly defines the Recovery Point Objective (RPO)?
Select an answer first
10foundation · easy
Why is it important to include cloud-specific considerations in a BC/DR plan?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.