A company's file server has an RTO of 2 hours and an RPO of 24 hours. The server uses RAID 1 for disk redundancy. The company wants to improve the server's availability without changing the RTO or RPO. Which option would BEST achieve this?

Perform daily backups to an external drive

Add a second power supply and network connection

Set up a second server with real-time replication

A company's critical database has an RTO of 2 hours and an RPO of 1 hour. The current backup strategy is a full backup every night and transaction log backups every 30 minutes. During a recent recovery test, restoring the full backup and applying the transaction logs took 3 hours. Which change would BEST reduce the recovery time to meet the RTO?

Increase the frequency of full backups to every 6 hours.

Implement a standby database with log shipping.

Switch to differential backups taken every hour.

Use a faster storage system for the backup files.

A hospital's patient portal must be available 24/7. The IT team is evaluating two disaster recovery strategies: Strategy A uses synchronous replication to a hot site, and Strategy B uses asynchronous replication with a 5-minute lag to a warm site. The hospital's RTO is 15 minutes and RPO is 5 minutes. Which strategy should be selected, and why?

Strategy B, because asynchronous replication is cheaper and the 5-minute lag meets the RPO.

Strategy A, because synchronous replication provides the lowest possible RPO and the hot site can meet the 15-minute RTO.

Neither strategy, because the RPO and RTO are too aggressive for any replication method.

Either strategy, because both meet the RPO and RTO.

Systems Security Certified Practitioner

Domain 4Objective 3

4.3 - Understand and Support Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) SSCP Practice Questions (Page 5)

Part of the Incident Response and Recovery domain, which accounts for 14% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 2–4 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

5concepts

14%of the exam

Questions 21–25

21expert · hard
A company's file server has an RTO of 2 hours and an RPO of 24 hours. The server uses RAID 1 for disk redundancy. The company wants to improve the server's availability without changing the RTO or RPO. Which option would BEST achieve this?
Select an answer first
22foundation · easy
Which testing method is the most comprehensive and involves the actual mobilization of personnel and resources to validate the BCP/DRP?
Select an answer first
23expert · hard
A company's critical database has an RTO of 2 hours and an RPO of 1 hour. The current backup strategy is a full backup every night and transaction log backups every 30 minutes. During a recent recovery test, restoring the full backup and applying the transaction logs took 3 hours. Which change would BEST reduce the recovery time to meet the RTO?
Select an answer first
24expert · hard
A hospital's patient portal must be available 24/7. The IT team is evaluating two disaster recovery strategies: Strategy A uses synchronous replication to a hot site, and Strategy B uses asynchronous replication with a 5-minute lag to a warm site. The hospital's RTO is 15 minutes and RPO is 5 minutes. Which strategy should be selected, and why?
Select an answer first
25foundation · easy
Which testing method involves a discussion-based session where participants walk through a scenario to identify gaps in the plan without actually executing recovery procedures?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

4.3 - Understand and Support Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) SSCP Practice Questions (Page 5)

Questions 21–25

A company's file server has an RTO of 2 hours and an RPO of 24 hours. The server uses RAID 1 for disk redundancy. The company wants to improve the server's availability without changing the RTO or RPO. Which option would BEST achieve this?

Which testing method is the most comprehensive and involves the actual mobilization of personnel and resources to validate the BCP/DRP?

Which testing method involves a discussion-based session where participants walk through a scenario to identify gaps in the plan without actually executing recovery procedures?

Keep studying — Incident Response and Recovery