6.3 - Collect Security Process Data (e.g., Technical and Administrative) CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of data collected from a BC exercise?

   • ABrand of coffee machines in the break room
   • BNumber of employees in the HR department
   • CList of office furniture
   • DTime taken to activate the business continuity plan
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A business continuity (BC) exercise tested the organization's ability to operate from an alternate site. The exercise revealed that the alternate site could not support the required number of concurrent users. What should the BC team do with this data?

   • AReport the exercise as successful because the alternate site was operational
   • BIncrease the number of users in the next exercise to see if the site can handle more
   • CIgnore the limitation because the exercise was only a test
   • DDocument the limitation and update the BC plan to reflect the actual capacity of the alternate site
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A business continuity (BC) exercise involved a simulated ransomware attack that encrypted files on a file server. The exercise revealed that the backup restoration process took twice as long as expected. Which data from the exercise would be MOST valuable for improving the BC plan?

   • AThe time taken to restore files from backup and the reason for the delay
   • BThe number of employees who participated in the exercise
   • CThe total cost of the exercise
   • DThe number of files that were encrypted
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a security KPI?

   • ATime since the last security audit
   • BPercentage of employees who completed security awareness training
   • CNumber of security incidents that occurred in the last quarter
   • DNumber of unresolved critical vulnerabilities in the environment
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of collecting data from business continuity (BC) exercises?

   • ATo assign blame for failures during the exercise
   • BTo evaluate the organization's resilience and continuity capabilities
   • CTo replace the need for disaster recovery testing
   • DTo calculate the total cost of the BC program
   Reveal Solution Discussion Select an answer first