BCI Technology & Digital Tools 2 — Questions and Answers
Question 1: Which cloud deployment model provides dedicated infrastructure for a single organization, offering the highest level of control and security?
- Public cloud
- Hybrid cloud
- Private cloud (Correct answer)
- Community cloud
Correct answer: Private cloud
A private cloud provides dedicated resources exclusively for one organization, giving maximum control over security and compliance.
Question 2: In BC/DR planning, what does a 'hot site' provide that distinguishes it from a warm site?
- Lower monthly cost than a warm site
- Fully operational systems ready for immediate failover (Correct answer)
- Basic infrastructure requiring several hours to activate
- Off-site tape storage for backup media
Correct answer: Fully operational systems ready for immediate failover
A hot site maintains fully operational, real-time replicated systems that enable near-immediate failover with minimal RTO.
Question 3: Which technology approach uses software to abstract and pool physical network resources, enabling programmatic control of network behavior?
- Virtual Private Network (VPN)
- Software-Defined Networking (SDN) (Correct answer)
- Network Attached Storage (NAS)
- Content Delivery Network (CDN)
Correct answer: Software-Defined Networking (SDN)
Software-Defined Networking separates the control plane from the data plane, allowing centralized programmatic management of network resources.
Question 4: What is the primary BC purpose of implementing an electronic vaulting solution?
- To encrypt end-user device storage
- To automatically replicate data to an off-site location in near real-time (Correct answer)
- To provide multi-factor authentication for remote workers
- To monitor network intrusion attempts continuously
Correct answer: To automatically replicate data to an off-site location in near real-time
Electronic vaulting continuously or frequently transmits data backups to a remote facility, minimizing data loss in a disaster scenario.
Question 5: During a BC technology audit, which metric best measures how quickly a system must be restored after a disruption to avoid unacceptable business impact?
- Recovery Point Objective (RPO)
- Maximum Tolerable Downtime (MTD)
- Recovery Time Objective (RTO) (Correct answer)
- Mean Time Between Failures (MTBF)
Correct answer: Recovery Time Objective (RTO)
Recovery Time Objective (RTO) defines the maximum acceptable duration to restore a system or process after a disruption.
Question 6: A ransomware attack encrypts an organization's primary database. Which backup strategy best limits the impact on RPO?
- Full weekly backups stored on-site
- Incremental backups to a network share on the same LAN
- Continuous data protection (CDP) to an air-gapped off-site repository (Correct answer)
- Differential daily backups on the same storage array
Correct answer: Continuous data protection (CDP) to an air-gapped off-site repository
CDP captures every change in near real-time and storing it air-gapped and off-site prevents ransomware from reaching backups, minimizing data loss.
Question 7: Which international standard provides guidance specifically on information security management and is frequently referenced in BC technology risk assessments?
- ISO 22301
- ISO 27001 (Correct answer)
- ISO 9001
- NIST SP 800-53
Correct answer: ISO 27001
ISO 27001 is the leading international standard for information security management systems (ISMS), commonly integrated with BC technology risk work.
BCI Technology & Digital Tools 2
Which cloud deployment model provides dedicated infrastructure for a single organization, offering the highest level of control and security?