BCI Technology & Digital Tools 3 — Questions and Answers
Question 1: An organization's crisis communication platform fails during an incident. Which capability should the BC plan require as a backup communication channel?
- Relying solely on corporate email until IT restores the platform
- Pre-agreed out-of-band channels such as satellite phones or dedicated mass-notification services (Correct answer)
- Suspending communications until the primary platform is restored
- Using personal social media accounts of executives
Correct answer: Pre-agreed out-of-band channels such as satellite phones or dedicated mass-notification services
Out-of-band backup channels ensure communication can continue even when primary corporate systems are unavailable during a crisis.
Question 2: What BC function does a Configuration Management Database (CMDB) primarily support during a recovery operation?
- Tracking employee attendance at the recovery site
- Providing an authoritative inventory of IT assets and their interdependencies (Correct answer)
- Generating financial impact reports for the executive team
- Scheduling automated patch deployment to recovered servers
Correct answer: Providing an authoritative inventory of IT assets and their interdependencies
A CMDB maps IT assets and their relationships, enabling recovery teams to understand dependencies and restore systems in the correct sequence.
Question 3: Which approach to system resilience involves running duplicate systems simultaneously so that if one fails, the other instantly assumes the full workload?
- Load balancing with session persistence
- Active-active redundancy (Correct answer)
- Cold standby configuration
- Scheduled failover testing
Correct answer: Active-active redundancy
Active-active redundancy keeps multiple identical systems processing workloads simultaneously, providing seamless failover with no service interruption.
Question 4: During a BC exercise, the team discovers their DR runbooks reference IP addresses that were changed six months ago. This finding reflects a failure in which process?
- Threat and hazard identification
- Business impact analysis review
- Change management integration with BC documentation (Correct answer)
- Supplier due diligence
Correct answer: Change management integration with BC documentation
BC documentation must be updated whenever infrastructure changes occur; the absence of this integration is a change management process gap.
Question 5: What is the key BC advantage of adopting Infrastructure as Code (IaC) for managing IT environments?
- Eliminates the need for disaster recovery sites entirely
- Enables rapid, repeatable provisioning of recovery environments from version-controlled templates (Correct answer)
- Replaces the need for data backup by storing infrastructure state in code
- Automates all cybersecurity incident response without human intervention
Correct answer: Enables rapid, repeatable provisioning of recovery environments from version-controlled templates
IaC allows teams to spin up identical recovery environments quickly and consistently using code, dramatically reducing recovery time.
Question 6: Which term describes the maximum amount of data an organization can afford to lose, expressed as a point in time before a disruption?
- Recovery Time Objective (RTO)
- Maximum Tolerable Period of Disruption (MTPD)
- Recovery Point Objective (RPO) (Correct answer)
- Service Delivery Objective (SDO)
Correct answer: Recovery Point Objective (RPO)
RPO defines the acceptable data loss window by specifying the latest point in time to which data must be recoverable.
Question 7: A financial services firm requires that its trading platform remain available 99.999% of the time. Which infrastructure design element is most critical to achieving this?
- Daily full backups to tape
- Single-region cloud deployment with auto-scaling
- Geographically dispersed active-active data centers with sub-second failover (Correct answer)
- Annual DR tests to validate recovery procedures
Correct answer: Geographically dispersed active-active data centers with sub-second failover
Five-nines availability (~5 minutes downtime/year) requires eliminating single points of failure through geographically redundant active-active architecture.
BCI Technology & Digital Tools 3
An organization's crisis communication platform fails during an incident.
Which capability should the BC plan require as a backup communication channel?