Question 1

A weighted analysis table can be useful in resolving the issue of what business function is the most critical.

Accepted Answer

A weighted analysis table assigns weights to different criteria and then evaluates the options based on those weights. This can be useful in determining which business function is the most critical by comparing them based on predetermined criteria and their respective weights.

Question 2

____ should include scenarios depicting a typical attack,including its methodology,indicators of an attack,and broad consequences.

Accepted Answer

Attack scenarios are designed to include a typical attack, its methodology, indicators, and consequences. Cross-training involves training individuals in multiple areas, attack triggers refer to the specific triggers that may lead to an attack, and incident profiles focus on the details of a specific attack rather than creating a scenario.

Question 3

The ____ is the point in time by which systems and data must be recovered after an outage as determined by the business unit.

Accepted Answer

The Recovery Point Objective (RPO) is the point in time by which systems and data must be recovered after an outage as determined by the business unit. The Dependency Objective is not a commonly used term in disaster recovery planning. The Recovery Time Objective (RTO) is the amount of time it takes to recover systems and data after an outage, not the point in time by which they must be recovered. The Training Objective is not relevant to disaster recovery planning.

Question 4

The reason for the ____ is to define the scope of the CP operations and establish managerial intent with regard to timetables for response to incidents,recovery from disasters,and reestablishment of operations for continuity.

Accepted Answer

The phrase "define the scope of the CP operations and establish managerial intent with regard to timetables for response to incidents,recovery from disasters,and reestablishment of operations for continuity" is specifically referencing the purpose of a contingency planning policy. The other options may be related to business continuity planning, but they do not specifically address the purpose outlined in the given statement.

Question 5

Attacks with a remote chance of occurrence receive more attention than those that occur frequently.

Accepted Answer

Attacks that occur frequently often receive more attention because they represent a clear and present danger, whereas those with a remote chance of occurrence might be considered less immediate threats and thus might not be prioritized as highly.

Question 6

____ is a common approach used in the discipline of systems analysis and design.

Accepted Answer

Systems diagramming is a common approach used in the discipline of systems analysis and design. It involves creating diagrams that illustrate the components and relationships of a system, and can help to identify potential problems and solutions. While database, network, and application diagramming may also be used in systems analysis and design, they are not as fundamental to the overall process as systems diagramming.

Question 7

A(n)____ should be a high-level manager with influence and resources that can be used to support the project team,promote the objectives of the CP project,and endorse the results that come from the combined effort.

Accepted Answer

A champion is a high-level manager who has influence and resources to support the project team, promote the objectives of the CP project, and endorse the results. An incident manager deals with unexpected events or incidents, a crisis manager handles major crises or emergencies, and a project manager is responsible for planning and executing a specific project from start to finish.

Question 8

The ____ job functions focus more on costs of system creation and operation,ease of use for system users,and timeliness of system creation,as well as transaction response time.

Accepted Answer

The information technology management and professionals are primarily concerned with the aspects of system creation and operation costs, ease of use for system users, timeliness of system creation, and transaction response time, as these elements directly relate to the design, implementation, and maintenance of information systems.

Question 9

The ____ is an investigation and assessment of the impact that various attacks can have on the organization.

Accepted Answer

A business impact analysis (BIA) is an essential component of an organization’s incident response plan. It is a process of identifying and assessing the potential effects of various disruptive events, such as cyber attacks or natural disasters, on critical business functions and processes. The BIA helps organizations prioritize their response efforts and allocate resources effectively to minimize the impact of an incident on the organization.

Question 10

The ____ job functions and organizational roles focus on protecting the organization's information systems and stored information from attacks.

Accepted Answer

Information security management and professionals are responsible for protecting the organization's information systems and stored information from attacks. They develop and implement security policies, procedures, and technologies to safeguard the organization's data and information assets. Information technology management and professionals focus on managing the organization's information technology infrastructure, and organizational management and professionals are responsible for overall strategy and decision-making, but may not have specific expertise in information security. Human resource management and professionals are responsible for managing the organization's workforce, including hiring and training employees, but are not directly involved in information security.

Question 11

A(n)____ provides the strategic vision and the linkage to the power structure of the organization,but someone has to manage the project.

Accepted Answer

A champion provides the strategic vision and the linkage to the power structure of the organization, supporting and advocating for the project within higher levels of management.

Question 12

The elements required to begin the ____ process are a planning methodology;a policy environment to enable the planning process;an understanding of the cause and effects of core precursor activities,known as the business impact analysis;and access to financial and other resources,as articulated and outlined by the planning budget.

Accepted Answer

The elements mentioned are required for the contingency planning process which involves creating a plan for how to deal with unexpected events or disasters that could potentially disrupt normal business operations. The other options (human resource planning, information security planning, relocation planning) are not specifically mentioned and do not fully match the elements listed.

Question 13

Effective contingency planning begins with effective policy.

Accepted Answer

Effective contingency planning is based on policies that outline what actions need to be taken in various situations. Without effective policies in place, it is difficult to know how to respond to unexpected events and disasters.

Question 14

The organization's level of preparedness directly influences the probability of a successful attack.

Accepted Answer

The more prepared an organization is, the lower the probability of a successful attack. Conversely, a lack of preparation increases the likelihood of a successful attack.

Question 15

Team leaders from the subordinate teams,including the IR,DR,and BC teams,should not be included in the CPMT.

Accepted Answer

Team leaders from the subordinate teams, including the IR, DR, and BC teams, should be included in the Crisis Management Plan Team (CPMT) as their expertise and input are crucial in handling the crisis situation effectively.

Question 16

The ____ can be used to collect information directly from the end users and business managers.

Accepted Answer

A facilitated data gathering session can involve direct interaction with end users and business managers to collect information about their needs, requirements and feedback. This approach can help to ensure that the system requirements align with the actual needs of the users and stakeholders. The other options listed (B, C, and D) are not typically used as direct methods of gathering information from end users and business managers.

Question 17

A(n)____ must lead the project and make sure a sound project planning process is used,a complete and useful project plan is developed,and project resources are prudently managed to reach the goals of the project.

Accepted Answer

The definition given describes the role of a project manager. A champion is a person who promotes a project or idea but does not necessarily lead the planning and management process. An incident manager deals with unexpected events or crises, which is not the main focus of the question.

Question 18

A(n)____ is generally thought of as a group of individuals united by shared interests or values within an organization and who share a common goal of making the organization function to meet its objectives.

Accepted Answer

A community of interest is a group of individuals within an organization who share common interests and goals related to the functioning of the organization. This community may be focused on a particular area such as cybersecurity, marketing, or finance.

Question 19

The ____ is the period of time within which systems,applications,or functions must be recovered after an outage.

Accepted Answer

Recovery time objective (RTO) is the period of time within which systems, applications, or functions must be recovered after an outage. The RTO is an essential metric in disaster recovery planning as it helps organizations estimate the maximum amount of downtime they can afford before significant revenue losses or other negative consequences occur. Choice A, recovery point objective (RPO), refers to the amount of data loss that is acceptable to an organization. Choice B, dependency objective, is not a commonly used term in disaster recovery planning. Choice D, training objective, refers to a specific learning goal or outcome rather than a metric for disaster recovery.

Question 20

The ____ details the estimate the cost of the best,worst,and most likely outcomes.

Accepted Answer

The Attack Scenario End Case details the estimate cost of the best, worst, and most likely outcomes of a potential attack, including the potential financial impact. The other options (A, C, and D) are not directly related to cost estimates.

Quiz 2: Planning for Organizational Readiness