CRP Recovery Strategy & Planning 3

Question 1

A company's IT recovery strategy specifies replication to a cloud provider. Which risk must be explicitly addressed in the plan?

Accepted Answer

Internet connectivity dependency and bandwidth during recovery

Answer

Cloud-based recovery depends on network connectivity; if the disaster also disrupts internet service, the cloud recovery strategy may be inaccessible.

Question 2

The term 'Maximum Tolerable Downtime' (MTD) represents:

Accepted Answer

The longest period a business function can be unavailable before causing irreparable harm

Answer

MTD (also called Maximum Allowable Downtime) defines the absolute outer limit of acceptable unavailability before the business suffers unacceptable consequences.

Question 3

When should recovery strategies be re-evaluated after initial development?

Accepted Answer

Whenever significant changes occur to business operations, technology, or the threat environment

Answer

Recovery strategies must be reviewed whenever material changes occur to processes, systems, staffing, or threats to ensure they remain effective.

Question 4

A 'cold site' recovery option is characterized by:

Accepted Answer

Basic infrastructure (power, network, space) with no pre-installed equipment

Answer

A cold site provides only basic utilities and physical space; the organization must procure and install all equipment before it can be used.

Question 5

Which approach BEST ensures that supply chain disruptions are addressed in recovery planning?

Accepted Answer

Identifying critical suppliers, assessing their resilience, and developing alternate sourcing strategies

Answer

Effective supply chain recovery planning requires understanding supplier dependencies, assessing their resilience, and establishing pre-qualified alternatives.

(CRP) Certified Resilience Professional Practice Test

(CRP) Certified Resilience Professional Practice Test

CRP Recovery Strategy & Planning 3