Which of the following is a recommended component of a business continuity plan document?

A marketing plan for promoting the organization during a crisis

A step-by-step procedure for activating the plan

A detailed list of all employees' personal medical records

A list of all potential risks and threats to the organization

A BC team is planning a tabletop exercise. They want to ensure that the exercise tests the organization's ability to make decisions under time pressure. Which exercise design element is MOST important to include?

A focus on technical system recovery rather than decision-making.

A detailed list of all recovery procedures.

A comfortable environment with no time constraints.

A realistic scenario with injects that require quick decisions.

Which of the following is an appropriate action after a BC exercise reveals a gap in the plan?

Conduct another exercise immediately to confirm the gap

Update the BC plan to address the identified gap

Ignore the gap if the exercise was successful overall

Remove the affected process from the BC plan

A logistics company's BIA determines that its package tracking system has an RTO of 2 hours and an RPO of 15 minutes. The system runs on a virtualized environment in a single data center. Which recovery strategy is MOST appropriate to meet these objectives?

Perform hourly snapshots on the same storage array.

Implement a hot standby site with synchronous data replication.

Use a cold site with daily backups.

Maintain a warm site with asynchronous replication every 30 minutes.

A startup company has a limited budget and has never conducted a BC exercise. The CEO wants to ensure that the business can survive a major disruption but is concerned about the cost of a full-scale exercise. Which approach is MOST appropriate for the startup?

Start with a tabletop exercise to validate the plan and identify gaps, then progress to more complex exercises as the program matures.

Skip exercises and rely on the BC plan documentation.

Conduct a full-scale exercise immediately to ensure readiness.

Hire an external consultant to conduct a full-scale exercise.

Certified Information Systems Security Professional

Domain 7Objective 13

7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 5)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

13%of the exam

Questions 21–25

21foundation · easy
Which of the following is a recommended component of a business continuity plan document?
Select an answer first
22application · medium
A BC team is planning a tabletop exercise. They want to ensure that the exercise tests the organization's ability to make decisions under time pressure. Which exercise design element is MOST important to include?
Select an answer first
23foundation · easy
Which of the following is an appropriate action after a BC exercise reveals a gap in the plan?
Select an answer first
24application · medium
A logistics company's BIA determines that its package tracking system has an RTO of 2 hours and an RPO of 15 minutes. The system runs on a virtualized environment in a single data center. Which recovery strategy is MOST appropriate to meet these objectives?
Select an answer first
25expert · hard
A startup company has a limited budget and has never conducted a BC exercise. The CEO wants to ensure that the business can survive a major disruption but is concerned about the cost of a full-scale exercise. Which approach is MOST appropriate for the startup?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.