CISM Business Continuity and Disaster Recovery 2

Question 1

What is the PRIMARY difference between a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP)?

Accepted Answer

A BCP focuses on keeping business operations running, while a DRP focuses on restoring IT systems

Answer

A BCP focuses on maintaining critical business operations during a disruption, while a DRP specifically addresses the recovery of IT systems and data.

Question 2

Maximum Tolerable Downtime (MTD) is best described as:

Accepted Answer

The longest period a business function can be unavailable before causing irreversible harm

Answer

MTD (also called Maximum Tolerable Period of Disruption) defines the upper limit of downtime beyond which the organization faces unacceptable consequences.

Question 3

Which disaster recovery strategy provides the LOWEST recovery time but typically carries the HIGHEST cost?

Accepted Answer

Hot site

Answer

A hot site is fully operational with up-to-date systems and data, enabling the fastest recovery, but requires significant ongoing investment to maintain.

Question 4

During a tabletop exercise, participants are:

Accepted Answer

Discussing and walking through disaster scenarios verbally without system activation

Answer

A tabletop exercise is a discussion-based simulation where key personnel walk through disaster scenarios verbally to identify gaps without activating actual recovery systems.

Question 5

What is the role of a cold site in a disaster recovery strategy?

Accepted Answer

A facility with basic infrastructure such as power and cooling, but no pre-installed IT equipment

Answer

A cold site provides basic facilities (space, power, cooling) but has no pre-installed equipment, requiring significant setup time before operations can resume.

CISM - Certified Information Security Manager Practice Test

CISM - Certified Information Security Manager Practice Test

CISM Business Continuity and Disaster Recovery 2