CSC Business Continuity & Disaster Recovery Planning 2

Question 1

A security consultant identifies that a client's critical operations can tolerate no more than four hours of downtime. This value is referred to as the:

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Recovery Time Objective (RTO)

Answer

Mean Time to Recovery (MTTR)

Answer

Recovery Point Objective (RPO)

Question 2

Which type of alternate site provides basic infrastructure such as raised flooring, power, and connectivity, but requires the organization to install its own equipment?

Accepted Answer

Cold site

Answer

Hot site

Answer

Warm site

Answer

Mirror site

Question 3

The concept of 'threat vulnerability asset' (TVA) mapping in business continuity planning is primarily used to:

Accepted Answer

Correlate identified threats and vulnerabilities to specific critical assets

Answer

Schedule quarterly security audits for all departments

Answer

Assign responsibility for continuity tasks to department heads

Answer

Document the chain of command during a declared disaster

Question 4

In a Disaster Recovery Plan (DRP), the 'crisis communications plan' ensures that:

Accepted Answer

Stakeholders, staff, and the public receive timely and accurate information

Answer

All external communications are suspended during a disaster

Answer

Social media accounts are deactivated to prevent misinformation

Answer

Only the CEO is authorized to communicate with external parties

Question 5

A security consultant conducting a full-scale continuity exercise that involves actual system failovers and personnel mobilization is performing a:

Accepted Answer

Full-scale simulation

Answer

Tabletop exercise

Answer

Functional exercise

Answer

Structured walkthrough

Question 6

Which of the following is considered a critical component of a Business Continuity Plan's maintenance program?

Accepted Answer

Conducting regular plan reviews and updates after organizational changes or exercises

Answer

Locking the BCP document and restricting access to senior leadership only

Answer

Replacing the BCP every five years regardless of operational changes

Answer

Delegating all plan updates to the IT department

Question 7

Under the ASIS Business Continuity Management standard (ASIS SPC.1), what is the role of senior management in a continuity program?

Accepted Answer

To demonstrate leadership commitment, allocate resources, and establish policy

Answer

To personally conduct all risk assessments and write the BCP

Answer

To serve as the primary incident commanders during a disaster

Answer

To audit the IT department's backup procedures quarterly