CCISO Business Continuity 3

Question 1

What is the primary purpose of a Business Continuity Policy?

Accepted Answer

To establish management commitment and high-level framework for BC activities

Answer

A BC Policy communicates executive commitment, defines scope, assigns accountability, and provides the governance framework for all continuity activities.

Question 2

Which concept refers to the point beyond which a business function cannot recover and the organization would cease to operate viably?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

MTD (also called Maximum Tolerable Period of Disruption) is the maximum time a business function can be unavailable before the organization suffers irreversible harm.

Question 3

When prioritizing recovery efforts, a CISO should base decisions primarily on:

Accepted Answer

The criticality and interdependencies identified in the BIA

Answer

The BIA provides objective data on financial and operational impact, enabling the CISO to prioritize recovery of the most critical and interdependent systems first.

Question 4

A tabletop exercise differs from a simulation test in that a tabletop exercise:

Accepted Answer

Is a discussion-based review without actual execution of recovery procedures

Answer

Tabletop exercises are structured discussions where team members walk through a scenario to identify gaps without activating the actual plan or disrupting operations.

Question 5

Which of the following is a key reason organizations implement geographic diversity in their BC strategy?

Accepted Answer

To avoid single points of failure due to regional disasters

Answer

Geographic diversity ensures that a regional disaster (earthquake, hurricane, power grid failure) cannot simultaneously affect both the primary and recovery sites.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Business Continuity 3