โ† All CISSP Flashcard Decks

Business Continuity Flashcards

7 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Business Continuity flashcards as text
  1. Which of the following BEST describes a reciprocal agreement in business continuity planning?

    Answer: An arrangement between two organizations to host each other's operations during a disaster

    A reciprocal agreement is a mutual arrangement where two organizations agree to provide backup processing space for each other in case of disaster.

  2. During BCP development, which phase involves identifying which assets and systems are most critical to ongoing business operations?

    Answer: Business Impact Analysis (BIA)

    The BIA phase identifies critical assets, processes, and the impact of their loss to prioritize recovery efforts.

  3. A financial services company replicates its database to a secondary data center 500 miles away with a 4-hour lag. Which risk does this configuration introduce?

    Answer: Losing up to 4 hours of data if the primary site fails

    A 4-hour replication lag means up to 4 hours of transactions could be lost if the primary site fails, potentially exceeding the RPO.

  4. Which standard provides international guidance on Business Continuity Management Systems (BCMS)?

    Answer: ISO 22301

    ISO 22301 is the international standard for Business Continuity Management Systems, providing requirements and guidelines.

  5. A parallel test of a DRP involves which key characteristic?

    Answer: Running both primary and alternate systems simultaneously

    In a parallel test, the alternate site is activated and runs concurrently with the primary site to validate recovery without business interruption.

  6. Which element should be reviewed and updated FIRST when a significant organizational change occurs, such as a merger or new product launch?

    Answer: Business Impact Analysis (BIA)

    A new or changed business function requires an updated BIA to re-evaluate criticality, MTD, RTO, and RPO for the changed organization.

  7. What distinguishes a Business Continuity Plan (BCP) from a Disaster Recovery Plan (DRP)?

    Answer: The BCP addresses maintaining business operations during a disruption; the DRP focuses on restoring IT systems afterward

    The BCP is broader, covering how the business continues to operate during a disruption, while the DRP specifically addresses IT and infrastructure restoration.