7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A BIA for a manufacturing company reveals that the production scheduling system has an MTD of 8 hours and an RTO of 4 hours. The system is currently backed up nightly to tape, and the recovery site is a cold site. The BC manager must recommend a strategy that meets the MTD and RTO while minimizing cost. Which strategy is MOST appropriate?

   • AKeep the cold site but increase backup frequency to every 4 hours.
   • BUse a mobile recovery site that can be delivered within 24 hours.
   • CUpgrade to a hot site with synchronous replication.
   • DImplement a warm site with hourly data replication.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is it important to include contact information in a business continuity plan?

   • ATo enable quick communication with key personnel and stakeholders during a disruption
   • BTo provide a marketing list for customer outreach
   • CTo document the organizational hierarchy for HR purposes
   • DTo satisfy regulatory requirements for data privacy
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is an output of a business impact analysis (BIA)?

   • AA list of recovery time objectives (RTOs) for critical functions
   • BA detailed technical recovery procedure for each system
   • CA schedule for conducting BC plan tests
   • DA list of all potential threats to the organization
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the first step in planning a business continuity exercise?

   • AReview the post-exercise report
   • BConduct a full-scale test of the plan
   • CUpdate the BC plan based on findings
   • DDefine the exercise objectives and scope
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A BC team is planning a full-scale exercise for a regional bank. The exercise will involve activating the alternate site and processing live transactions. The bank's compliance officer is concerned that the exercise could disrupt customer service and violate regulatory requirements. Which action BEST addresses the compliance officer's concern while still achieving a meaningful test?

   • ADelay the exercise until regulatory approval is obtained.
   • BProceed with live transactions but limit the exercise to a small number of accounts.
   • CUse synthetic transactions instead of live customer transactions during the exercise.
   • DCancel the full-scale exercise and conduct a tabletop instead.
   Reveal Solution Discussion Select an answer first