CAP CAP Business Continuity & Disaster Recovery Planning 5

Question 1

Which NIST publication provides the primary guidance for developing federal information system contingency plans?

Accepted Answer

NIST SP 800-34

Answer

NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, is the authoritative guidance for developing and implementing IT contingency plans.

Question 2

A warm site alternative recovery facility has systems pre-configured but requires several hours to become fully operational. How does this differ from a hot site?

Accepted Answer

A hot site is fully operational with current data and can take over immediately

Answer

A hot site mirrors the production environment with up-to-date data and can assume operations with minimal delay, whereas a warm site requires additional setup time before becoming operational.

Question 3

During contingency plan testing, a tabletop exercise PRIMARILY achieves which objective?

Accepted Answer

Familiarizes personnel with their roles and identifies plan gaps through discussion

Answer

Tabletop exercises are discussion-based simulations that familiarize participants with recovery procedures and identify gaps in the plan without activating actual systems.

Question 4

An organization's contingency plan has not been tested in 18 months and key personnel have changed. Which risk does this MOST directly create?

Accepted Answer

Plan may not reflect current environment or personnel roles, causing recovery failures

Answer

Untested and outdated contingency plans risk failure during actual recovery because documented procedures and assigned roles may no longer match current system configurations or staff.

Question 5

Which supply chain risk is MOST relevant to disaster recovery planning for hardware-dependent systems?

Accepted Answer

Long lead times for replacement hardware during a disaster

Answer

Hardware replacement lead times can extend recovery far beyond the RTO during a disaster, making supply chain availability a critical DR planning consideration.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP CAP Business Continuity & Disaster Recovery Planning 5