Business Continuity & Disaster Recovery Planning Flashcards
7 cards from real CSC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Disaster Recovery Planning flashcards as text
When a security consultant recommends a 'warm site' recovery strategy, the client should expect:
Answer: A recovery time of several hours to days as equipment is brought online
A warm site has partially configured equipment and connectivity, typically requiring hours to days of setup before full operations resume, balancing cost and recovery speed.
In the context of business continuity, 'single points of failure' (SPOFs) are critical because they:
Answer: Represent components whose failure would halt an entire critical process
A SPOF is any component or process that, if it fails, causes the entire system or critical function to stop, making it a high-priority target for redundancy planning.
A client asks a security consultant to help document the step-by-step procedures for recovering a specific IT application after a failure. This document is called a:
Answer: System Recovery Procedure (SRP) or IT Disaster Recovery Plan
A System Recovery Procedure or IT Disaster Recovery Plan contains the specific technical steps required to restore a particular system or application after failure.
Which of the following best defines 'resilience' in the context of organizational security and continuity?
Answer: The capacity of an organization to absorb disruption and adapt to maintain acceptable operations
Organizational resilience is the adaptive capacity to absorb stress, recover functionality, and adapt to new circumstances while maintaining acceptable operations.
During a post-incident review following a business disruption, the MOST important outcome a security consultant should document is:
Answer: Lessons learned and recommended improvements to the continuity plan
Lessons learned and plan improvements are the most valuable continuity outcomes from a post-incident review, ensuring the organization is better prepared for future events.
Which of the following continuity concepts refers to the ability to distribute workloads across multiple facilities to maintain operations when one site is compromised?
Answer: Geographic redundancy
Geographic redundancy involves distributing operations across multiple physical locations so that if one site fails, others can absorb the workload and maintain continuity.
A security consultant reviews a client's BCP and notes that the plan was last tested two years ago and has not been updated since a major acquisition. What should the consultant FIRST recommend?
Answer: Conduct an updated Business Impact Analysis and revise the plan to reflect the new organizational structure
After a major organizational change like an acquisition, the BIA must be revisited and the BCP updated to reflect new critical functions, assets, and dependencies before testing.