5.3 Maintain Contingency Plan, Resiliency Plan (e.g., Continuity of Operations Plan (COOP)), Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) ISSMP Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A financial services firm has just completed a major upgrade of its core banking platform. The BCP team needs to validate that the new platform can be recovered at the alternate site within the stated RTO. They have a limited maintenance window and cannot risk disrupting production. Which testing type should they use to validate the recovery procedures without impacting live operations?

   • AFull interruption test
   • BChecklist test
   • CParallel test
   • DTabletop test
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A company's BCP is updated frequently, but the updates are not consistently communicated to all stakeholders. As a result, the DR team used an outdated version of the plan during a recent incident. The company wants to improve its plan update process. Which action would be most effective?

   • AOnly allow the BCP manager to make changes
   • BImplement a formal version control and approval process for all plan changes
   • CSend an email to all employees after each update
   • DConduct a tabletop test after every update
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A healthcare organization is developing a test plan for its annual DRP validation. The plan must include the specific systems to be tested, the personnel required, and the timeline. Which component is essential for the test plan to be actionable?

   • AA list of all employees in the organization
   • BA defined scope, objectives, resources, and schedule
   • CA list of all vendor contracts
   • DA detailed budget for the entire IT department
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   After executing a contingency plan test, what is the primary purpose of evaluating the test results?

   • ATo identify gaps, deficiencies, and areas for improvement in the plan
   • BTo assign blame for any failures that occurred during the test
   • CTo verify that all participants followed the test script exactly
   • DTo determine the cost of the test for budgeting purposes
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's BCP was updated to reflect a new backup vendor, but the change was made directly to the master document without review. Later, the DR team used the old vendor's procedures during an actual incident. What process failure caused this issue?

   • AThe backup vendor was not notified
   • BLack of version control and approval process
   • CThe plan was not tested after the update
   • DThe DR team did not read the plan
   Reveal Solution Discussion Select an answer first