APP APP Business Continuity and Emergency Planning 2 — Questions and Answers
Question 1: Which element of a Disaster Recovery Plan (DRP) specifically addresses how and where data backups are stored to protect digital assets?
- Offsite data backup and replication strategy (Correct answer)
- Employee evacuation procedure
- Customer refund policy
- Public relations communication plan
Correct answer: Offsite data backup and replication strategy
An offsite data backup and replication strategy ensures that critical digital assets are preserved at a geographically separate location so they can be restored after a disaster.
Question 2: In disaster recovery, Recovery Point Objective (RPO) refers to:
- The maximum acceptable amount of data loss measured in time (Correct answer)
- The geographic distance between primary and backup sites
- The number of IT staff required during recovery
- The cost of restoring physical equipment
Correct answer: The maximum acceptable amount of data loss measured in time
RPO defines the point in time to which data must be recovered, determining how frequently backups must occur to avoid unacceptable data — and asset — loss.
Question 3: Which of the following best describes a tabletop exercise in business continuity planning?
- A discussion-based session where team members walk through a simulated emergency scenario (Correct answer)
- A live physical evacuation drill of the office building
- A penetration test of the company's network infrastructure
- A full-scale test of backup hardware at an offsite facility
Correct answer: A discussion-based session where team members walk through a simulated emergency scenario
A tabletop exercise is a low-cost, discussion-based simulation that helps identify gaps in continuity plans without interrupting real operations.
Question 4: For asset protection purposes, which factor is most critical when selecting an offsite backup storage location for a business?
- Geographic distance from the primary site to avoid the same regional disaster (Correct answer)
- Proximity to the nearest bank branch
- The number of parking spaces at the facility
- Lower cost compared to on-premises storage
Correct answer: Geographic distance from the primary site to avoid the same regional disaster
Offsite backups must be far enough from the primary location to avoid being affected by the same natural disaster, flood, or power outage, ensuring data assets can be recovered.
Question 5: Which of the following is the correct order of steps in a typical Disaster Recovery Plan activation?
- Assess damage → Activate DRP → Notify stakeholders → Restore operations → Debrief (Correct answer)
- Restore operations → Notify stakeholders → Assess damage → Debrief → Activate DRP
- Debrief → Activate DRP → Notify stakeholders → Assess damage → Restore operations
- Notify stakeholders → Debrief → Assess damage → Restore operations → Activate DRP
Correct answer: Assess damage → Activate DRP → Notify stakeholders → Restore operations → Debrief
The standard DRP sequence begins with damage assessment to determine the scope of impact before activating recovery procedures and communicating with stakeholders.
Question 6: An asset protection professional recommends that a client maintain business interruption insurance primarily to:
- Replace lost income and cover ongoing expenses while operations are suspended after a covered loss (Correct answer)
- Fund the purchase of a competitor during a market downturn
- Pay employee bonuses when the business performs well
- Cover the cost of marketing campaigns after a rebranding
Correct answer: Replace lost income and cover ongoing expenses while operations are suspended after a covered loss
Business interruption insurance compensates for lost revenue and fixed expenses during the period a business cannot operate, directly protecting financial assets during a covered disruption.
APP APP Business Continuity and Emergency Planning 2
Which element of a Disaster Recovery Plan (DRP) specifically addresses how and where data backups are stored to protect digital assets?