5.1 Facilitate Development of Contingency Plans ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A manufacturing company is developing a business continuity plan. The BIA identifies that the production scheduling system is critical, but the IT team has only two staff members trained to recover it. The company's operations manager insists that the system be restored within 4 hours, but the IT team estimates that a full recovery takes 8 hours with current resources. The company cannot hire additional staff this quarter. Which approach best aligns the BCP with the constraint?

   • AImplement a manual workaround process to maintain operations until the system is restored.
   • BTrain additional staff from other IT teams to support recovery, even if it delays other projects.
   • CSet the RTO to 8 hours and document the business impact of the longer downtime.
   • DNegotiate with the operations manager to accept a longer RTO while exploring cost-effective ways to reduce recovery time, such as simplifying the recovery procedure.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a primary factor to consider when developing a Disaster Recovery Plan (DRP)?

   • AThe recovery time objective (RTO) for critical systems
   • BThe organization's branding guidelines
   • CThe number of social media followers the organization has
   • DThe organization's product pricing strategy
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A regional bank is updating its contingency plans. The bank's BIA shows that its online banking platform must be restored within 2 hours of an outage, but the primary data center is in a flood-prone area. The bank's cloud provider offers a recovery site in a different region, but the provider's contract only guarantees failover within 4 hours. The bank's compliance team notes that customer financial data must remain within the country. Which action best addresses the conflict between the RTO and the provider's capability?

   • AAccept the 4-hour failover and document the risk in the BIA, noting that the RTO is unachievable.
   • BImplement an alternate recovery solution, such as a second cloud provider or a local standby, that can meet the 2-hour RTO while keeping data in-country.
   • CMove the primary data center to a location outside the flood-prone area to eliminate the need for a recovery site.
   • DNegotiate a revised RTO with the cloud provider to match the 4-hour failover capability.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Why is it important to manage third-party dependencies in contingency planning?

   • ATo eliminate the need for internal contingency plans
   • BTo transfer all risk to the third party
   • CTo reduce the number of stakeholders
   • DBecause disruptions at third parties can impact the organization's continuity
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is the primary purpose of a Business Impact Analysis (BIA) in resiliency planning?

   • ATo define the communication protocols for notifying stakeholders during a disruption
   • BTo identify the maximum acceptable outage time for critical business functions
   • CTo document the organizational structure and reporting lines for incident response
   • DTo list the hardware and software assets that require backup and recovery procedures
   Reveal Solution Discussion Select an answer first