7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A BC manager is reviewing the business continuity plan after a merger. The plan currently lists recovery procedures for the original company's systems but does not include the newly acquired company's critical systems. What is the MOST appropriate action?

   • ARemove the original company's systems from the plan to focus on the new entity.
   • BAdd the acquired company's systems to the plan without a BIA.
   • CKeep the plan unchanged because the acquired company has its own BC plan.
   • DConduct a BIA for the acquired company's systems and update the BC plan to include them.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of including objectives in a business continuity plan?

   • ATo list all potential risks and threats to the organization
   • BTo establish the desired outcomes and recovery targets for the plan
   • CTo provide a detailed technical recovery procedure for each system
   • DTo assign specific tasks to each employee
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A hospital's BIA identifies that its electronic health record (EHR) system has an RTO of 1 hour and an RPO of 5 minutes. The hospital currently uses a warm site with asynchronous replication every 15 minutes. The BC manager must recommend a new strategy that meets the RTO and RPO while minimizing cost. Which strategy is MOST appropriate?

   • AKeep the warm site but reduce replication interval to 5 minutes.
   • BUse a cold site with nightly backups.
   • CImplement a cloud-based disaster recovery as a service (DRaaS) with 30-minute RPO.
   • DUpgrade to synchronous replication to a hot site.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is it important to develop a realistic scenario for a BC exercise?

   • ATo ensure the exercise is completed quickly
   • BTo avoid involving too many participants
   • CTo make the exercise relevant and challenging for participants
   • DTo minimize the cost of the exercise
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A manufacturing company's BIA shows that its enterprise resource planning (ERP) system is critical, with an RTO of 4 hours and a recovery point objective (RPO) of 30 minutes. The ERP data changes frequently throughout the day. Which recovery strategy for the ERP data BEST meets the RPO?

   • ASynchronous replication to a secondary site
   • BTape backups sent offsite every night
   • CDaily full backups with weekly incremental backups
   • DHourly snapshots stored on the same storage array
   Reveal Solution Discussion Select an answer first