Business Continuity And Disaster Recovery questions and answers 2024

BCP stands for: Business Continuity Planning ________ is a small subset of business continuity: Disaster Recovery Brainpower Read More Previous Play Next Rewind 10 seconds Move forward 10 seconds Unmute 0:03 / 0:15 Full screen A ________ is a calamitous event, especially one occurring suddenly and causing great loss of life, damage, or hardship. Disaster A critical function of a business is defined as a function that if disrupted for a significant period of time could result in severe damage and loss to the organization and ultimately lead to business failure True What is an organization's coordinated response to a disaster in an effective and timely manner? Emergency Response Which of the following is an example of a man-made disaster? Power outage The reason for establishing a BC program within an organization can be as straightforward as legislative, regulatory, and contractual obligation to do so. True A BC program structure commensurate with corporate governance is not essential to establish clear lines of authority and accountability as well as responsibility. False A planning team develops a ________ outlining the activities necessary to implement the BC project. Work Plan The communication tactic must: Ensure that the goals of the program are consistently promoted Help to develop allies Help to assess people's experience that would be beneficial in the program Help to demonstrate the program's value to the business What is the first phase of the BCP? Project Initiation How can a Business Continuity Management team gain senior management support during project initiation? Detailing a need for a Business Continuity Plan What is the role of a steering committee for a BCP project? To provide governance An important part of a Business Continuity Management Policy is: Roles and Responsibilities Of the individuals listed, who would provide the best endorsement for a business continuity plan's statement of importance. Chief Executive Officer The success of the program is dependent upon the people that implement the programs activities and capabilities. True The reason to hold a kickoff meeting at the launch of the project is: To inform all staff of the purpose and objectives of the project Important parts of the functional requirements phase include: Business Impact Analysis and Risk Analysis Recovery Point Objective (RPO) is related to: Data loss Collecting data for the BIA is often done through: Interviews When determining the BIA for a department that supports other areas of the business it is important to document: Service Level Agreements (SLAs) The selection of the ideal business recovery strategy is dependent on: Maximum Tolerable Downtime (MTD) What is the second phase of the Business Continuity Plan? BIA, Risk Analysis Business Impact Analysis is an intensive process that requires a thorough and comprehensive examination of a business. True Maximum Tolerable Downtime (MTD) is the amount of time that a critical business activity could suffer disruption without damage or loss leading to a business failure. True _____ is the allotted amount of time given to recover a critical business activity. Recovery Time Objective Risk Analysis is concerned with: Threats and assets A threat can be either natural or: An accident A lack of control or an unmitigated risk can be referred as: A vulnerability A method of evaluating risk is to create scenarios. This is commonly associated with what type of risk assessment? Qualitative A common formula for risk assessment is: ALE=SLE*ARO A fire suppression system is which type of control? Preventative A primary objective of a risk assessment is to: Prioritize risk What is a significant control risk caused by reduced staffing during a disaster and recovery effort? Lack of separation of duties Business impact analysis is performed to identify: The exposure to loss to the organization During the risk analysis phase of the planning, which of the following actions could manage threats or mitigate the effects of an event? Implementing procedural controls The first priority in any crisis is: The safety and health of personnel Choosing a recovery site should consider: Likelihood to be affected by the same disaster as the primary site The best way to handle an incident or disaster is through: Specialized teams that handle different tasks Once an incident has been detected and the safety of personnel has been assured, the next step is: Contain the incident When a warm site is used for recovery the organization needs to: Have arrangements with vendors for equipment procurement When activating a plan following an incident, what is the priority for operational recovery? Activate most critical systems first When operating at a backup site following a disaster the organization must Backup data regularly and store offsite Who should declare a disaster? Senior management What is the third phase of the Business Continuity Plan? Continuity Strategy BCP recovery consists of actions taken after an emergency to reestablish, rebuild, or replace conditions and services to an acceptable level. True What is the fourth phase of the BCP? Recovery A DR plan has objectives to Minimize interruptions to the business's ability to provide products and services. Minimize quantitative loss to business Resume critical operations within a specified time after a disasters. Execute the recovery strategy and steps to recover critical services in the order of priority assigned to them. BCP recovery consists of actions taken after an emergency to re-establish, rebuild or replace conditions and services to an acceptable level. T or F True A major part of BCP strategy development is examining controls that can be preventive in nature. T or F True When operating at a backup site following a disaster the organization must: Backup data regularly and store offsite Backing up data to tape has the following characteristic: It takes more time to recover than disk A factor to be considered when using a cloud provider for backing up data is: The legal implications of storing data in another country A major part of BCP strategy development is examining controls that can be preventative in nature. True What is the fourth phase of the Business Continuity Plan? Recovery Plan A DR Plan has objectives to: Minimize quantitative and qualitative loss to business Resume critical operations within a specified time after a disaster Minimize interruptions to the business's ability to provide products and services Execute the recovery strategy and steps to recover critical services in the order of priority assigned to them. Electronic vaulting is: Method of backing up data A disadvantage of using a cold site is that: It cannot be tested Which one of the following items is a characteristic of hot sites but not a characteristic of warm sites? Current data One of the advantages of a hot site recovery solution is Highly available What is the third phase of the BCP? Continuity Strategy The best recovery strategy for a manufacturing organization using uncommon equipment may be: Outsourcing If a company wants the most efficient restore from tape-backup Full Backup A ________ is an alternative to ducting. plenum The cheapest and longest backup recovery method. Tape backups _______ eliminates the need to recover in a disaster. This is faster, more efficient, but also adds cost and complexity. System/Application replication What is the sixth phase of the BCP? Implement The BC and DR ________ has the responsibility to facilitate activities between management, business units, and IT. Coordinator The BC and DR ________ have the responsibilities to provide emergency management, line management and recovery of IT infrastructure and applications. Teams _____ (are) is essential to recovery of processes and services. Documentation A critical element in the decision to approve the BCP is costs. True Which of the following is NOT one of the implementation tasks of the BCP? Perform a Business Impact Analysis ________ is responsible for organizational commitment and management concerns (obstacles, budgets, etc.). Senior Management