CAP CAP Business Continuity & Disaster Recovery Planning 2

Question 1

A Business Impact Analysis (BIA) is a critical input to contingency planning. What is its primary output?

Accepted Answer

Identification of mission-critical functions, their recovery priorities, and maximum tolerable downtime

Answer

The BIA identifies which business functions are most critical, establishes recovery priorities, quantifies the impact of disruptions, and determines MTD, RTO, and RPO for each function.

Question 2

Maximum Tolerable Downtime (MTD) is the metric that defines which boundary in continuity planning?

Accepted Answer

The absolute longest period a mission-essential function can be disrupted before causing catastrophic impact

Answer

MTD (also called Maximum Tolerable Period of Disruption) represents the threshold beyond which operational disruption would result in unacceptable mission, business, or legal consequences.

Question 3

Which contingency plan test type involves the least disruption to operations and tests only the plan documentation and personnel knowledge?

Accepted Answer

Tabletop exercise

Answer

A tabletop exercise is a discussion-based test where personnel walk through contingency plan scenarios without activating systems, making it the least disruptive form of contingency plan testing.

Question 4

Under FISMA, which federal publication serves as the primary guidance for federal information system contingency planning?

Accepted Answer

NIST SP 800-34

Answer

NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, is the authoritative guidance for developing, testing, and maintaining federal IT contingency plans.

Question 5

When a federal agency activates its contingency plan and transitions operations to an alternate processing site, which activity should occur first?

Accepted Answer

Activating the notification and escalation procedures per the contingency plan

Answer

Contingency plan activation begins with executing the notification and escalation procedures to alert key personnel, leadership, and stakeholders before beginning system recovery activities.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP CAP Business Continuity & Disaster Recovery Planning 2