5.4 Manage Disaster Response and Recovery Process ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company's primary data center is destroyed by a tornado. The disaster recovery plan is activated, and the recovery team is working at the alternate site. The team has successfully restored the company's email system, but the customer database is still being restored. The company's sales team needs access to the customer database to process orders. What should the recovery team do?

   • AStop restoring the customer database and focus on other systems that are easier to restore.
   • BTell the sales team to use manual processes to handle orders until the database is restored.
   • CWait for the primary site to be restored before continuing the restoration.
   • DContinue restoring the customer database as a priority, and inform the sales team of the expected restoration time.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of incorporating lessons learned into the disaster recovery plan?

   • ATo document the disaster for historical purposes
   • BTo justify the cost of the response
   • CTo satisfy regulatory requirements
   • DTo improve the plan's effectiveness for future incidents
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which mechanism is commonly used to coordinate activities among multiple response teams during a disaster?

   • AA social media group
   • BA vendor management office
   • CA unified command structure
   • DA change advisory board
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which element is a key part of the disaster declaration criteria defined in a contingency plan?

   • AThe availability of backup media
   • BThe time required to restore operations exceeds the maximum tolerable outage
   • CThe number of employees affected by the event
   • DThe estimated cost of the damage
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A healthcare organization's data center is flooded, and the disaster has been formally declared. The disaster communication plan specifies that all employees must be notified within 30 minutes of the declaration, and key customers must be notified within one hour. The organization's primary communication channels (email and the corporate intranet) are down because they are hosted in the affected data center. What should the incident response team do to meet the communication requirements?

   • AUse the emergency notification system, which is hosted in a separate cloud environment, to send alerts to employees and customers.
   • BUse personal mobile phones to call each employee and customer individually, even if it takes longer than the specified times.
   • CWait for the IT team to restore email and the intranet before sending any notifications.
   • DPost updates on the organization's public website, assuming that all employees and customers will check it.
   Reveal Solution Discussion Select an answer first