Business Continuity & Disaster Recovery Planning Flashcards
7 cards from real CSC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Disaster Recovery Planning flashcards as text
What is the primary purpose of a Business Impact Analysis (BIA) in a security consulting engagement?
Answer: To identify and prioritize critical business functions and assess the impact of disruptions
A BIA identifies critical business functions and quantifies the potential impact of disruptions, forming the foundation for continuity planning.
The Recovery Time Objective (RTO) is best defined as:
Answer: The target duration within which a business process must be restored after a disruption
RTO defines the maximum acceptable length of time that a business process can be down before the impact becomes unacceptable.
Which of the following best describes a Recovery Point Objective (RPO)?
Answer: The maximum acceptable amount of data loss measured in time prior to a disaster
RPO defines the maximum age of data that an organization can afford to lose, essentially setting the backup frequency requirement.
A security consultant recommending a 'hot site' as an alternate recovery facility is describing:
Answer: A fully equipped, immediately operational duplicate of the primary site
A hot site is a fully equipped, immediately operational facility that mirrors the primary site and can take over operations with minimal delay.
When developing a Business Continuity Plan (BCP), which step should be completed FIRST?
Answer: Conducting a Business Impact Analysis (BIA)
The BIA must be completed first to identify critical functions and set recovery priorities before any continuity strategies can be designed.
In the context of disaster recovery, a 'tabletop exercise' is primarily used to:
Answer: Walk stakeholders through a simulated scenario to evaluate plan effectiveness
A tabletop exercise is a discussion-based simulation where participants work through a scenario to identify gaps in the plan without operational disruption.
Which standard provides internationally recognized guidelines for Business Continuity Management Systems?
Answer: ISO 22301
ISO 22301 is the international standard specifically for Business Continuity Management Systems (BCMS), outlining requirements for planning, implementing, and improving continuity capabilities.