CCISO Business Continuity 2

Question 1

Which metric defines the maximum amount of data loss an organization can tolerate, expressed in time?

Accepted Answer

Recovery Point Objective (RPO)

Answer

RPO defines the maximum acceptable age of files that must be recovered from backup storage to resume normal operations after a disaster.

Question 2

A CISO is reviewing a vendor's BCP. Which clause should be contractually required to ensure the vendor's recovery capabilities align with the organization's needs?

Accepted Answer

Service Level Agreement (SLA) with defined RTOs

Answer

SLAs with defined RTOs contractually bind vendors to meet the organization's recovery time requirements and provide recourse if they fail.

Question 3

During BCP development, which analysis identifies the minimum resources required to resume critical business functions?

Accepted Answer

Business Impact Analysis (BIA)

Answer

A BIA identifies critical business functions, their dependencies, and the minimum resources necessary to resume operations within acceptable timeframes.

Question 4

An organization uses a hot site for disaster recovery. What distinguishes a hot site from a warm site?

Accepted Answer

A hot site has fully operational systems with real-time data replication

Answer

A hot site is a fully equipped and operational duplicate facility with real-time or near-real-time data replication, enabling near-immediate failover.

Question 5

Which BCP component ensures employees know their roles and responsibilities during a disruption?

Accepted Answer

Awareness and Training Program

Answer

Awareness and training programs ensure all personnel understand their BCP roles, enabling coordinated and effective response during an actual disruption.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Business Continuity 2