1.7 - Identify, Analyze, Assess, Prioritize, and Implement Business Continuity (BC) Requirements CISSP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In a Business Impact Analysis (BIA), what is the scope typically focused on?

   • AOnly the processes that have been identified as critical by senior management.
   • BAll business processes and their dependencies, both internal and external.
   • COnly the IT infrastructure and applications that support business operations.
   • DOnly the departments that generate revenue for the organization.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a strategy to manage external dependencies in a business continuity plan?

   • ADeveloping alternative sourcing options for critical supplies.
   • BReducing the number of employees involved in procurement.
   • CMoving all data to on-premises storage.
   • DIncreasing the frequency of internal audits.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A mid-sized bank's BIA identifies three critical functions: customer-facing online banking (RTO 1 hour, RPO 5 minutes), internal loan processing (RTO 4 hours, RPO 1 hour), and regulatory reporting (RTO 24 hours, RPO 24 hours). The bank has a limited budget and must choose between two recovery strategies: Strategy X fully meets the RTO/RPO for online banking but provides no benefit to the other functions. Strategy Y partially meets online banking (RTO 2 hours, RPO 15 minutes) and fully meets the requirements for loan processing and regulatory reporting. The bank's risk appetite prioritizes customer-facing services. Which strategy should the bank implement?

   • AStrategy X, because it fully meets the most critical function's requirements, aligning with the risk appetite that prioritizes customer-facing services
   • BA combination of both strategies, using Strategy X for online banking and Strategy Y for the other functions
   • CStrategy Y, because it addresses more functions and provides a broader recovery capability
   • DNeither strategy, because the bank should first conduct a new BIA to confirm the requirements
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A pharmaceutical company's BIA identifies a contract research organization (CRO) as a critical external dependency for clinical trial data analysis. The CRO is the only provider with the specialized expertise required. The company's RTO for clinical trial data is 48 hours. The CRO's contract includes a 72-hour restoration commitment. The company's risk manager proposes adding a secondary CRO as a backup, but the primary CRO's contract includes an exclusivity clause. What is the most appropriate action?

   • ANegotiate with the primary CRO to reduce the restoration commitment to 48 hours or less, and address the exclusivity clause to allow a backup provider
   • BAccept the 72-hour restoration commitment because the CRO is the only provider with the required expertise
   • CIncrease the company's RTO to 72 hours to align with the CRO's commitment
   • DTerminate the contract with the primary CRO and engage the secondary CRO as the sole provider
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A manufacturing company is conducting a BIA. The plant's production line generates $500,000 in revenue per hour, the shipping department processes $200,000 in orders per hour, and the HR department supports payroll for 1,200 employees. A disruption to the production line would halt all downstream operations, while shipping could be delayed for up to 48 hours without losing customers. HR payroll could be delayed for 2 weeks. Which function should be prioritized as the most critical in the BIA report?

   • AHR department, because payroll affects all 1,200 employees
   • BAll three functions equally, because each is essential to operations
   • CShipping department, because it processes customer orders and generates revenue
   • DProduction line, because it has the highest hourly revenue impact and halts downstream operations
   Reveal Solution Discussion Select an answer first