5.3 Maintain Contingency Plan, Resiliency Plan (e.g., Continuity of Operations Plan (COOP)), Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What does determining an organization's resiliency capability primarily involve?

   • AListing all potential threats to the organization
   • BCalculating the total cost of all recovery resources
   • CEvaluating the organization's ability to withstand and recover from disruptions
   • DSelecting the most expensive recovery solution
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company's IT change management process approves a major upgrade to the ERP system. The BCP team is not notified, and the plan is not updated. Six months later, a disaster occurs and the DR team attempts to recover the ERP system using outdated procedures, causing a significant delay. What is the root cause of this failure?

   • AThe DR team did not test the plan regularly
   • BThe BCP team was not integrated into the change management process
   • CThe DR team was not trained on the new ERP system
   • DThe ERP upgrade was not properly documented
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which activity supports the continuous improvement of contingency plans?

   • ALimiting plan updates to once every five years
   • BFreezing the plan after initial approval
   • CConducting regular audits of the plan and its execution
   • DIgnoring feedback from test participants
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company conducted a full interruption test of its ERP system. The test revealed that the backup tape restoration process takes twice as long as expected due to a new encryption feature. How should the BCP team apply this lesson learned?

   • ADisable encryption on all backups to speed up restoration
   • BDocument the issue but keep the original restoration time in the plan
   • CConduct a tabletop test to verify the restoration time
   • DRevise the DRP to reflect the new restoration time and update the RTO if necessary
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A bank has defined a resiliency metric that the customer portal must be available 99.99% of the time. During the last quarter, the portal was down for 1 hour. What should the resiliency team do?

   • AChange the metric to 99.9% to match actual performance
   • BInvestigate the root cause and implement improvements to meet the threshold
   • CIgnore the outage because it was only one hour
   • DReport the metric as met because the outage was planned maintenance
   Reveal Solution Discussion Select an answer first