A regional bank completed a business impact analysis (BIA) and identified that its online banking platform has a maximum tolerable downtime (MTD) of 2 hours and a recovery time objective (RTO) of 1 hour. The platform runs on virtual machines in a primary data center. The bank's recovery strategy currently uses a cold site with 24-hour activation. Which of the following is the MOST appropriate recovery strategy adjustment to meet the stated objectives?

Upgrade the cold site to a warm site with daily backups and 12-hour activation.

Increase the frequency of full backups to every 6 hours at the cold site.

Implement a hot site with real-time data replication and automated failover.

Accept the current cold site and extend the MTD to 24 hours.

After a tabletop exercise, the BC team collects observations and identifies that the crisis communication plan was unclear about who notifies external stakeholders. According to best practices for post-exercise review, what should the BC team do NEXT?

Schedule another tabletop exercise immediately to test the same scenario again.

Archive the observations and move on to the next exercise.

Conduct a full-scale exercise to test the communication plan under real conditions.

Update the BC plan to assign specific notification roles and responsibilities.

Certified Information Systems Security Professional

Domain 7Objective 13

7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 7)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

13%of the exam

Questions 31–34

31foundation · easy
Which type of BC exercise involves a discussion-based session where participants walk through a scenario without actually performing recovery actions?
Select an answer first
32foundation · easy
Which recovery strategy involves using an alternate facility that is fully equipped and ready to operate immediately after a disruption?
Select an answer first
33application · medium
A regional bank completed a business impact analysis (BIA) and identified that its online banking platform has a maximum tolerable downtime (MTD) of 2 hours and a recovery time objective (RTO) of 1 hour. The platform runs on virtual machines in a primary data center. The bank's recovery strategy currently uses a cold site with 24-hour activation. Which of the following is the MOST appropriate recovery strategy adjustment to meet the stated objectives?
Select an answer first
34application · medium
After a tabletop exercise, the BC team collects observations and identifies that the crisis communication plan was unclear about who notifies external stakeholders. According to best practices for post-exercise review, what should the BC team do NEXT?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.13 - Participate in Business Continuity (BC) Planning and Exercises CISSP Practice Questions (Page 7)

Questions 31–34

Which type of BC exercise involves a discussion-based session where participants walk through a scenario without actually performing recovery actions?

Which recovery strategy involves using an alternate facility that is fully equipped and ready to operate immediately after a disruption?

After a tabletop exercise, the BC team collects observations and identifies that the crisis communication plan was unclear about who notifies external stakeholders. According to best practices for post-exercise review, what should the BC team do NEXT?

Keep studying — Security Operations