5.4 Manage Disaster Response and Recovery Process ISSMP Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which method is commonly used to collect lessons learned from a disaster response?

   • AWaiting for the next disaster to test improvements
   • BConducting surveys and interviews with response team members
   • CDeleting all incident logs to protect privacy
   • DIgnoring feedback from non-technical staff
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A hospital's data center is flooded, and the disaster recovery plan is activated. The hospital's critical systems include patient records, billing, and pharmacy. The recovery team has restored the patient records system, but the billing and pharmacy systems are still down. The hospital's recovery time objective (RTO) for pharmacy is 4 hours, and it has been 3 hours since the disaster. What should the recovery team do next?

   • AFocus on restoring the pharmacy system because its RTO is approaching.
   • BRestore the pharmacy system only after the billing system is fully operational.
   • CStop all recovery efforts and wait for additional resources.
   • DContinue working on the billing system because it was next in the original recovery sequence.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the first step in restoring critical functions after a disaster?

   • ARestore non-critical functions first to build confidence
   • BRestore functions in the order they were affected
   • CRestore all functions simultaneously
   • DRestore the most critical business functions first, as defined in the BIA
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company's disaster recovery plan requires the restoration of its customer relationship management (CRM) system within 6 hours and its email system within 12 hours. A cyberattack has caused a complete outage of both systems. The recovery team has only enough personnel to work on one system at a time. The CRM system is critical for sales, and the email system is critical for internal communication. What should the recovery team do?

   • ARestore the CRM system first because it has a shorter RTO and is critical for revenue generation.
   • BSplit the team to work on both systems simultaneously, even if it slows down the restoration of both.
   • CWait for additional personnel to arrive before starting any restoration work.
   • DRestore the email system first because it is needed for internal communication during the response.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A retail company's distribution center is destroyed by a fire. The disaster recovery plan requires the company to resume order fulfillment within 48 hours. The company has a contract with a third-party logistics provider to supply temporary warehouse space and equipment. However, the provider can only supply 50% of the required capacity. What should the incident response team do to manage this resource constraint?

   • AImmediately purchase new warehouse space without considering the cost.
   • BUse the temporary warehouse for all operations, even if it means exceeding the provider's capacity.
   • CPrioritize the fulfillment of orders for the company's most profitable customers and delay others.
   • DCancel all orders until the full capacity is available.
   Reveal Solution Discussion Select an answer first