CAP CAP Business Continuity & Disaster Recovery Planning

Question 1

What is the primary purpose of a Contingency Plan (CP) for a federal information system as described in NIST SP 800-34?

Accepted Answer

To provide instructions for recovering an information system after a disruption or disaster

Answer

To define employee evacuation procedures during physical emergencies

Answer

To document backup power requirements for server rooms

Answer

To establish vendor escalation procedures for hardware failures

Question 2

Recovery Time Objective (RTO) is best defined as which of the following?

Accepted Answer

The maximum amount of time allowed to restore a system to operational status after a disruption

Answer

The maximum tolerable data loss measured in time

Answer

The time required to complete a full backup

Answer

The scheduled maintenance window for system updates

Question 3

Recovery Point Objective (RPO) determines which aspect of disaster recovery planning?

Accepted Answer

The maximum acceptable amount of data loss measured in time

Answer

The geographic distance between primary and backup data centers

Answer

The number of backup copies required for compliance

Answer

The priority order of system restoration

Question 4

Which type of disaster recovery site is fully equipped and operational, allowing immediate failover with minimal downtime?

Accepted Answer

Hot site

Answer

Cold site

Answer

Warm site

Answer

Mobile site

Question 5

NIST SP 800-34 recommends that contingency plans be tested at what minimum frequency?

Accepted Answer

Annually

Answer

Monthly

Answer

Quarterly

Answer

Every three years

Question 6

What is the relationship between Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP)?

Accepted Answer

BCP focuses on sustaining business operations broadly while DRP specifically addresses IT system recovery

Answer

BCP and DRP are identical documents with different names

Answer

DRP covers all organizational functions while BCP is limited to IT systems

Answer

BCP is required only for classified systems while DRP applies to all systems