โ† All CISSP Flashcard Decks

Business Continuity Flashcards

7 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Business Continuity flashcards as text
  1. Which metric defines the maximum tolerable period that a business process can be offline before causing unacceptable consequences?

    Answer: Maximum Tolerable Downtime (MTD)

    MTD (also called Maximum Tolerable Outage) is the longest a process can be unavailable before the organization suffers irreversible harm.

  2. A BCP team identifies that losing two hours of financial transaction data is acceptable. Which metric does this represent?

    Answer: RPO

    Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time.

  3. Which BCP document lists the specific steps staff must follow to restore a critical system after a disaster?

    Answer: Disaster Recovery Plan

    The Disaster Recovery Plan (DRP) contains detailed procedural steps for restoring IT systems and infrastructure.

  4. During a BIA, which factor is used to rank the criticality of business functions?

    Answer: Financial and operational impact of disruption over time

    The BIA ranks functions by the financial, operational, and reputational impact that results from their disruption.

  5. An organization's alternate processing site has identical hardware and software in a fully operational state, synchronized in real time. What type of site is this?

    Answer: Hot site

    A hot site is a fully operational duplicate facility that can take over processing with minimal or no delay.

  6. Which testing method validates BCP procedures with the LEAST disruption to normal operations?

    Answer: Tabletop exercise

    A tabletop exercise involves walking through BCP scenarios in a discussion format without activating any systems or personnel.

  7. What is the PRIMARY purpose of a call tree in a BCP?

    Answer: To ensure rapid and structured notification of key personnel

    A call tree is a structured communication cascade that ensures key personnel are notified quickly during an incident.