CISSP Business Continuity 4

Question 1

Which backup strategy involves copying only data that has changed since the LAST FULL backup, regardless of previous incremental backups?

Accepted Answer

Differential backup

Answer

A differential backup captures all data changed since the last full backup, making restoration require only the full backup plus the latest differential.

Question 2

An organization uses tape backups stored in the same building as the primary data center. What BCP risk does this create?

Accepted Answer

Loss of backup data in the same disaster that affects primary systems

Answer

Storing backups on-site means a physical disaster such as fire or flood could destroy both primary and backup data simultaneously.

Question 3

What is the PRIMARY goal of an exercise after-action review (AAR) in business continuity?

Accepted Answer

To document lessons learned and improve the BCP

Answer

An AAR captures what worked, what failed, and what gaps were found during a BCP exercise to drive plan improvements.

Question 4

Which type of alternate site provides space and power but requires the organization to bring and install its own equipment before operations can resume?

Accepted Answer

Cold site

Answer

A cold site provides only basic infrastructure (space, power, HVAC) with no pre-installed equipment, requiring significant setup time.

Question 5

A company's BCP states that payroll processing must resume within 24 hours of any disaster. This statement defines which metric?

Accepted Answer

RTO

Answer

The Recovery Time Objective (RTO) specifies the maximum acceptable time to restore a business process after a disruption.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Business Continuity 4