7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary role of a business impact analysis (BIA) in business continuity planning?

   • ATo provide a detailed technical recovery procedure for each system
   • BTo test the effectiveness of the business continuity plan
   • CTo assign roles and responsibilities to the BC team
   • DTo identify critical business functions and determine recovery priorities
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of business continuity planning?

   • ATo ensure that critical business operations can continue during and after a disruption
   • BTo transfer all operational risks to third-party vendors
   • CTo provide a detailed technical recovery procedure for every IT system
   • DTo eliminate all potential disruptions to business operations
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A multinational corporation has a mature BC program and conducts annual full-scale exercises. This year, the BC manager wants to test the organization's ability to respond to a cyberattack that disrupts both primary and alternate data centers. However, the board is concerned about the cost and potential disruption of a full-scale exercise. Which approach BEST balances the need for realistic testing with cost and disruption concerns?

   • AConduct a tabletop exercise with only senior management.
   • BConduct a simulation exercise that models the cyberattack scenario and tests decision-making and coordination without activating systems.
   • CProceed with the full-scale exercise despite the cost, as it is the only way to test the scenario.
   • DCancel the exercise and rely on the existing plan.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services firm is updating its business continuity plan. The BC manager wants to ensure that the plan clearly defines who has the authority to declare a disaster and activate the plan. Which section of the BC plan should contain this information?

   • ARecovery procedures
   • BTesting and maintenance
   • CScope and objectives
   • DRoles and responsibilities
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following best describes the scope of business continuity planning?

   • AIt is primarily concerned with financial risk management
   • BIt focuses solely on restoring IT infrastructure after a disaster
   • CIt addresses the recovery of critical business processes, personnel, and facilities
   • DIt only applies to natural disasters and not to man-made incidents
   Reveal Solution Discussion Select an answer first