CISM Business Continuity and Disaster Recovery 2

Question 1

What is the PRIMARY difference between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)?

Accepted Answer

A BCP focuses on keeping business operations running, while a DRP focuses on restoring IT systems

Answer

A BCP is for natural disasters while a DRP is for cyber incidents

Answer

A BCP is strategic and a DRP is not required if a BCP exists

Answer

A DRP covers all business functions while a BCP covers only IT functions

Question 2

Maximum Tolerable Downtime (MTD) is best described as:

Accepted Answer

The longest period a business function can be unavailable before causing irreversible harm

Answer

The time required to fully restore all IT systems after a disaster

Answer

The average time between system failures in a production environment

Answer

The time between the last backup and the occurrence of a disaster

Question 3

Which disaster recovery strategy provides the LOWEST recovery time but typically carries the HIGHEST cost?

Accepted Answer

Hot site

Answer

Cold site

Answer

Warm site

Answer

Reciprocal agreement

Question 4

During a tabletop exercise, participants are:

Accepted Answer

Discussing and walking through disaster scenarios verbally without system activation

Answer

Physically relocating operations to the backup site to test failover

Answer

Cutting over live systems to the backup environment to measure RTO

Answer

Testing data restoration from offsite backups on production hardware

Question 5

What is the role of a cold site in a disaster recovery strategy?

Accepted Answer

A facility with basic infrastructure such as power and cooling, but no pre-installed IT equipment

Answer

A fully equipped facility with real-time data replication for immediate failover

Answer

A cloud environment maintained by a managed service provider

Answer

A secondary data center that mirrors the primary site at reduced capacity

Question 6

Which BC/DR test type carries the GREATEST risk of causing unplanned downtime?

Accepted Answer

Full interruption test

Answer

Tabletop exercise

Answer

Structured walkthrough

Answer

Parallel test

Question 7

A reciprocal agreement for disaster recovery means:

Accepted Answer

Two organizations agree to host each other's operations in the event of a disaster

Answer

An organization contracts a third party to provide guaranteed backup facilities

Answer

A vendor agrees to provide replacement hardware within an agreed timeframe

Answer

An insurance provider agrees to cover all recovery costs after a declared disaster