1.7 - Identify, Analyze, Assess, Prioritize, and Implement Business Continuity (BC) Requirements CISSP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following best describes a 'critical business function' in the context of a BIA?

   • AA process that is essential for the organization to meet its legal and regulatory obligations.
   • BA process that has been outsourced to an external vendor.
   • CA process that, if disrupted, would cause significant financial loss, operational failure, or reputational damage.
   • DA process that is performed by the majority of employees on a daily basis.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary basis for prioritizing business continuity requirements?

   • AThe preferences of the IT department.
   • BThe order in which processes were identified during the BIA.
   • CThe availability of budget for continuity solutions.
   • DThe findings of the Business Impact Analysis (BIA).
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A food distribution company relies on a single cold-storage warehouse provider for its perishable inventory. The BIA identifies this as a critical dependency with an RTO of 12 hours. The warehouse provider's contract includes a 24-hour restoration commitment. The company's risk manager proposes building its own cold-storage facility as a backup, but the cost is significant and the company's budget is limited. What is the most appropriate risk treatment for this external dependency?

   • ANegotiate a reduced restoration commitment with the provider and explore a mutual-aid agreement with a competing distributor for temporary cold-storage capacity
   • BBuild the cold-storage facility because it eliminates the dependency risk entirely
   • CAccept the 24-hour restoration commitment because the provider is the only option in the region
   • DIncrease the RTO to 24 hours to align with the provider's commitment
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a 'cascading impact' of an external dependency failure?

   • AThe failure of one external entity causes multiple internal business functions to fail.
   • BThe failure of an external entity results in a financial penalty for the organization.
   • CThe failure of an external entity is covered by insurance.
   • DThe failure of an external entity is quickly resolved without lasting effects.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A national airline's BIA identifies three critical functions: flight operations (RTO 2 hours), baggage handling (RTO 6 hours), and customer service call center (RTO 12 hours). The airline's risk appetite is to minimize passenger disruption. A budget constraint allows the airline to fully fund recovery for only two functions this year. Which two functions should be prioritized?

   • AAll three functions, because each is critical to passenger experience
   • BFlight operations and customer service call center, because the call center handles passenger communications during disruptions
   • CBaggage handling and customer service call center, because they are customer-facing functions
   • DFlight operations and baggage handling, because they have the shortest RTOs and directly impact passenger journeys
   Reveal Solution Discussion Select an answer first