← All CISM Flashcard Decks

Business Continuity and Disaster Recovery Flashcards

7 cards from real CISM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Business Continuity and Disaster Recovery flashcards as text
  1. What is the PRIMARY difference between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)?

    Answer: A BCP focuses on keeping business operations running, while a DRP focuses on restoring IT systems

    A BCP focuses on maintaining critical business operations during a disruption, while a DRP specifically addresses the recovery of IT systems and data.

  2. Maximum Tolerable Downtime (MTD) is best described as:

    Answer: The longest period a business function can be unavailable before causing irreversible harm

    MTD (also called Maximum Tolerable Period of Disruption) defines the upper limit of downtime beyond which the organization faces unacceptable consequences.

  3. Which disaster recovery strategy provides the LOWEST recovery time but typically carries the HIGHEST cost?

    Answer: Hot site

    A hot site is fully operational with up-to-date systems and data, enabling the fastest recovery, but requires significant ongoing investment to maintain.

  4. During a tabletop exercise, participants are:

    Answer: Discussing and walking through disaster scenarios verbally without system activation

    A tabletop exercise is a discussion-based simulation where key personnel walk through disaster scenarios verbally to identify gaps without activating actual recovery systems.

  5. What is the role of a cold site in a disaster recovery strategy?

    Answer: A facility with basic infrastructure such as power and cooling, but no pre-installed IT equipment

    A cold site provides basic facilities (space, power, cooling) but has no pre-installed equipment, requiring significant setup time before operations can resume.

  6. Which BC/DR test type carries the GREATEST risk of causing unplanned downtime?

    Answer: Full interruption test

    A full interruption test shuts down primary systems and fully activates recovery procedures, carrying the highest risk of real outages if the recovery environment fails.

  7. A reciprocal agreement for disaster recovery means:

    Answer: Two organizations agree to host each other's operations in the event of a disaster

    A reciprocal agreement is an arrangement between two organizations to provide backup processing capacity for each other if one experiences a disaster.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. isaca.org — Renewal, test delivery, eligibility, score validity, fees, exam format, passing score, retake fee, score release, test dates · verified Oct 2026