CCISO Business Continuity 4

Question 1

An organization stores encrypted backup tapes off-site. Which BC control does this practice primarily support?

Accepted Answer

Data availability and integrity for recovery operations

Answer

Off-site encrypted backup tapes ensure data remains available and uncompromised for recovery even if the primary site is completely destroyed.

Question 2

What is the relationship between Disaster Recovery Planning (DRP) and Business Continuity Planning (BCP)?

Accepted Answer

DRP is an IT-focused subset of the broader BCP

Answer

DRP focuses on restoring IT systems and infrastructure, while BCP encompasses the broader strategy for maintaining all business functions during and after a disruption.

Question 3

Which document formally records the results of a BIA, including critical processes, dependencies, and recovery priorities?

Accepted Answer

BIA Report

Answer

The BIA Report is the formal deliverable that captures all findings, including process criticality rankings, interdependencies, RTOs, RPOs, and resource requirements.

Question 4

A CISO implements a reciprocal agreement with a partner organization for BC purposes. What is the main risk of this arrangement?

Accepted Answer

Both organizations may be affected by the same regional disaster simultaneously

Answer

Reciprocal agreements are cost-effective but risky if both organizations are in the same geographic region or industry sector and face the same disaster event.

Question 5

Which BC strategy involves running parallel operations at both the primary and recovery sites simultaneously to ensure zero downtime?

Accepted Answer

Active-active configuration

Answer

An active-active configuration has both sites processing transactions simultaneously, so if one fails, the other continues without any service interruption.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Business Continuity 4