CISM Business Continuity and Disaster Recovery

Question 1

What is the PRIMARY purpose of a Business Continuity Plan (BCP)?

Accepted Answer

To ensure critical business functions can continue during and after a disruption

Answer

To eliminate all risks that could disrupt business operations

Answer

To document the IT infrastructure and recovery procedures

Answer

To assign accountability for security incidents to key personnel

Question 2

Which metric defines the maximum amount of data loss an organization can tolerate, measured in time?

Accepted Answer

Recovery Point Objective (RPO)

Answer

Recovery Time Objective (RTO)

Answer

Maximum Tolerable Downtime (MTD)

Answer

Mean Time to Recover (MTTR)

Question 3

What is the FIRST step in developing a Business Continuity Plan?

Accepted Answer

Conducting a Business Impact Analysis (BIA)

Answer

Identifying recovery strategies and backup sites

Answer

Defining roles and responsibilities for the recovery team

Answer

Establishing communication procedures for incidents

Question 4

A Recovery Time Objective (RTO) of four hours means:

Accepted Answer

The system must be fully functional within four hours of a disaster declaration

Answer

Data must be restored to within four hours of the last backup

Answer

The business can tolerate four hours of data loss before operations are impacted

Answer

Recovery teams must assemble within four hours of an incident

Question 5

Who holds ULTIMATE responsibility for ensuring that business continuity planning is adequate and funded?

Accepted Answer

Senior management or the board of directors

Answer

The Chief Information Security Officer (CISO)

Answer

The Business Continuity Manager

Answer

The IT disaster recovery team lead

Question 6

What distinguishes a hot site from a warm site in disaster recovery?

Accepted Answer

A hot site has fully operational systems with current data, while a warm site has equipment but requires setup time

Answer

A hot site is located in a different country, while a warm site is domestic

Answer

A hot site is owned by the organization, while a warm site is leased from a vendor

Answer

A hot site supports only critical systems, while a warm site supports all systems

Question 7

A Business Impact Analysis (BIA) primarily helps an organization:

Accepted Answer

Prioritize recovery efforts based on criticality and financial impact

Answer

Identify security vulnerabilities in critical systems

Answer

Determine which employees are essential during a disaster

Answer

Select vendors for offsite data storage solutions