Deck 12: Business Continuity Management

Question 1

Which of the following testing exercises are discussion-based only and don't involve deploying equipment or other resources?

A) Functional exercises
B) Full-scale testing
C) Tabletop exercises
D) Plan audits

Answer 1

Tabletop exercises

Question 2

Which of the following best describes a warm site?

A) A backup facility that has power and HVAC but no equipment
B) A self-contained unit that has hardware, software, and peripherals
C) A fully operational location that is ready for immediate move in and contains all data
D) An operational location that contains all equipment but data must be restored

Answer 2

An operational location that contains all equipment but data must be restored

Question 3

Which of the following best describes a mobile site?

A) A backup facility that has power and HVAC but no equipment
B) A self-contained unit that has hardware, software, and peripherals
C) A fully operational location that is ready for immediate move in and contains all data
D) An operational location that contains all equipment, but data must be restored

Answer 3

A self-contained unit that has hardware, software, and peripherals

Question 4

Which of the following is the total length of time an essential business function can be unavailable without causing significant harm to the organization?

A) Maximum tolerable downtime
B) Maximum tolerable uptime
C) Recovery time objective
D) Recovery point objective

Question 5

Which of the following represents the acceptable data loss?

A) Maximum tolerable downtime
B) Maximum tolerable uptime
C) Recovery time objective
D) Recovery point objective

Question 6

Which of the following business continuity plans focus on the initial response to a disaster and includes plan activation, notification, evacuation, and communication?

A) Response plans
B) Contingency plans
C) Recovery plans
D) Resumption plans

Question 7

Which of the following business continuity plans focus on the immediate and near-term alternative workplace and business processes?

A) Response plans
B) Contingency plans
C) Recovery plans
D) Resumption plans

Question 8

Which of the following is the official notification that the organization is no longer operating in emergency or disaster mode?

A) Validation
B) Activation
C) Deactivation
D) Resumption

Question 9

Which of the following statements best describes functional exercises?

A) Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations
B) Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function
C) Discussion-based exercises that do not involve deploying equipment or other resources
D) Systematic walkthrough of the procedures to determine disaster readiness

Question 10

Which of the following best describes full-scale testing?

A) Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations
B) Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function
C) Discussion-based exercises that do not involve deploying equipment or other resources
D) Systematic walkthrough of the procedures to determine disaster readiness

Question 11

Which of the following is an example of willful damage?

A) Cybercrime
B) User or operator error
C) Hazardous chemical exposure
D) Public health emergency

Question 12

Which of the following business continuity plans guides the organization back to normalcy?

A) Response plans
B) Contingency plans
C) Recovery plans
D) Resumption plans

Question 13

Which of the following describes evacuations and shelter-in-place procedures for a threat or incident?

A) Occupant emergency plan (OEP)
B) Business continuity threat assessment (BCTA)
C) Business continuity risk assessment (BCRA)
D) Continuity of operations plan (COOP)

Question 14

Which of the following is an example of an operational issue that can lead to an emergency or disaster?

A) Biological accident
B) Air contaminants
C) Degradation of power
D) Sabotage

Question 15

A __________ organization is one that has the ability to quickly adapt and recover from known or unknown changes to the environment.

A) dependent
B) resistant
C) tolerable
D) resilient

Question 16

Which of the following refers to the maximum amount of time a system resource can be unavailable before there is an unacceptable impact on other system resources or business processes?

A) Maximum tolerable downtime
B) Maximum tolerable uptime
C) Recovery time objective
D) Recovery point objective

Question 17

Which of the following individuals or groups is vested by the Board of Directors with the authority to make decisions related to disaster preparation, response, and recovery?

A) Chief Operating Officer
B) IT department
C) Department managers
D) Business Continuity Team

Question 18

Which of the following refers to a location that is fully operational and ready to move into in the event of an emergency or disaster?

A) Hot site
B) Warm site
C) Cold site
D) Mobile site

Question 19

Which of the following locations is fully redundant with real-time replication from the production site?

A) Reciprocal site
B) Mirrored site
C) Mobile site
D) Cold site

Question 20

Following a disaster, which of the following recovery phases encompasses systems that provide a general operating environment, including environmental and physical controls?

A) Communications recovery
B) Facilities recovery
C) Infrastructure recovery
D) Network recovery