1.7 - Identify, Analyze, Assess, Prioritize, and Implement Business Continuity (BC) Requirements CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of a Business Impact Analysis (BIA) in the context of business continuity planning?

   • ATo design and implement technical solutions for restoring IT systems after a disaster.
   • BTo assign specific recovery roles and responsibilities to personnel during an incident.
   • CTo test the effectiveness of existing business continuity plans through simulated exercises.
   • DTo identify and quantify the operational and financial impacts of disruptions on critical business functions.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary output of the data collection phase in a Business Impact Analysis (BIA)?

   • AA list of all external suppliers and their contact information.
   • BA comprehensive report detailing the financial and operational impacts of disruptions.
   • CA prioritized list of recovery strategies for critical functions.
   • DQuantitative and qualitative data on business processes, dependencies, and impacts.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A regional bank's BIA identifies that its wire-transfer processing function cannot tolerate more than 4 hours of downtime without causing irreparable regulatory penalties and customer attrition. The current backup system restores data from a snapshot taken every 24 hours. The bank's risk appetite allows a maximum of 30 minutes of data loss for this function. Which combination of metrics should the continuity plan specify for the wire-transfer function?

   • AMTD of 30 minutes and RTO of 4 hours
   • BMTD of 4 hours and RPO of 24 hours
   • CRPO of 4 hours and RTO of 30 minutes
   • DRTO of 4 hours and RPO of 30 minutes
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the role of Service Level Agreements (SLAs) in managing external dependencies for business continuity?

   • ATo transfer all liability for business continuity to the external provider.
   • BTo define the expected performance and recovery commitments of the external provider.
   • CTo provide a legal basis for terminating the contract without notice.
   • DTo eliminate the need for the organization to have its own continuity plan.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When prioritizing critical business functions in a BIA, which of the following impact criteria is most commonly used?

   • AThe financial loss per hour of downtime.
   • BThe age of the technology supporting the function.
   • CThe number of employees involved in the function.
   • DThe complexity of the function's workflow.
   Reveal Solution Discussion Select an answer first