7.11 - Implement Disaster Recovery (DR) Processes CISSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a disaster damage assessment?

   • ATo notify all stakeholders
   • BTo determine the extent of damage and the recovery required
   • CTo assign blame for the disaster
   • DTo update the DR plan immediately
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary goal of restoration and recovery operations?

   • ATo resume business processes according to recovery objectives
   • BTo communicate with stakeholders
   • CTo identify the root cause of the disaster
   • DTo update the DR plan
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company's DR plan specifies an RTO of 2 hours for its customer-facing web application. After a disaster, the IT team restores the application from backups at the alternate site, but the application fails to start due to a missing configuration file. The team spends 3 hours troubleshooting and finally gets it running. What is the MOST significant issue with this recovery?

   • AThe IT team should have used a different backup set
   • BThe RTO was not met, indicating the DR plan may not have been adequately tested
   • CThe alternate site was not properly configured
   • DThe backup was corrupted and should have been verified before the disaster
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company's DR team is assessing damage after a tornado. They find that the primary server room is destroyed, but the offsite backup location is intact. The company's RPO is 1 hour, and the last backup was taken 30 minutes before the tornado. What is the MOST important factor in determining the recovery strategy?

   • AThe RPO is met, so the recovery can proceed using the offsite backups
   • BThe DR team must first determine the cause of the tornado
   • CThe RTO is more important than the RPO in this scenario
   • DThe offsite backup location must be tested for connectivity before recovery
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company's DR plan is activated after a cyberattack. The incident commander is coordinating the response. The DR coordinator reports that the backup systems are also compromised, and the only clean backups are from two weeks ago. The company's RPO is 24 hours. The CEO is pressuring the team to restore operations immediately. What is the MOST appropriate action for the incident commander?

   • AAttempt to recover data from the compromised backups using forensic tools
   • BRestore from the two-week-old backups, accept the data loss, and initiate a post-incident review to improve backup resilience
   • CDelay the restore until the RPO can be met by finding additional data sources
   • DInform the CEO that the RPO cannot be met and ask for a decision on whether to restore or wait
   Reveal Solution Discussion Select an answer first