7.11 - Implement Disaster Recovery (DR) Processes CISSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A regional bank has just declared a disaster after a fire damaged its primary data center. The DR plan specifies that the first action after declaration is to activate the plan and mobilize the response team. The incident commander is on vacation and unreachable. According to the plan, who should assume the incident commander role?

   • AThe chief information officer (CIO), who is the highest-ranking IT executive
   • BThe most senior IT staff member present at the time of the disaster
   • CThe DR coordinator, who is the designated alternate in the succession plan
   • DThe facilities manager, who is responsible for the building where the fire occurred
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company's DR plan requires restoring systems in a specific order: first the network infrastructure, then the database, then the application server. During recovery, the network team is delayed because they are also handling the initial incident response. The database team is ready to restore the database, but the network is not yet available. What is the BEST course of action?

   • AHave the database team start the restore process, as it can be done without network connectivity
   • BWait for the network team to finish before starting any restore
   • CSkip the network restore and bring up the application server directly
   • DReassign the network team to focus solely on the restore, delaying incident response
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company conducts an annual DR tabletop exercise. During the exercise, the DR coordinator discovers that several key IT staff are unfamiliar with their specific recovery tasks and the order in which systems must be restored. What is the BEST way to address this gap?

   • AReplace the IT staff with external consultants who are more experienced in DR
   • BUpdate the DR plan to simplify the recovery tasks so they are easier to remember
   • CConduct more frequent, role-specific training sessions and hands-on drills for the IT staff
   • DPost the DR plan on the company intranet and rely on staff to read it before a disaster
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   During a disaster, the DR coordinator has activated the plan and mobilized the team. What is the NEXT immediate step in the DR response procedure?

   • AEscalate the situation to senior management and begin damage assessment.
   • BRestore all systems from backups immediately.
   • CDeclare the disaster and notify all employees.
   • DUpdate the DR plan with lessons learned.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A disaster has been formally declared for an organization. According to the DR plan, which action should be taken FIRST?

   • ANotify all employees via the emergency notification system.
   • BActivate the disaster recovery plan and mobilize the response team.
   • CBegin restoring data from the most recent backups.
   • DConduct a lessons-learned review of the disaster.
   Reveal Solution Discussion Select an answer first