CSC Business Continuity & Disaster Recovery Planning 2

Question 1

A security consultant identifies that a client's critical operations can tolerate no more than four hours of downtime. This value is referred to as the:

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Maximum Tolerable Downtime (MTD) is the absolute maximum time a business process can be unavailable before the impact causes irreversible harm.

Question 2

Which type of alternate site provides basic infrastructure such as raised flooring, power, and connectivity, but requires the organization to install its own equipment?

Accepted Answer

Cold site

Answer

A cold site provides only the basic physical infrastructure, requiring the organization to procure and install all equipment before operations can resume.

Question 3

The concept of 'threat vulnerability asset' (TVA) mapping in business continuity planning is primarily used to:

Accepted Answer

Correlate identified threats and vulnerabilities to specific critical assets

Answer

TVA mapping links specific threats and vulnerabilities to the assets they could affect, enabling targeted and prioritized risk mitigation in continuity planning.

Question 4

In a Disaster Recovery Plan (DRP), the 'crisis communications plan' ensures that:

Accepted Answer

Stakeholders, staff, and the public receive timely and accurate information

Answer

A crisis communications plan establishes protocols for delivering timely, accurate, and consistent information to all relevant stakeholders during a disaster.

Question 5

A security consultant conducting a full-scale continuity exercise that involves actual system failovers and personnel mobilization is performing a:

Accepted Answer

Full-scale simulation

Answer

A full-scale simulation activates the actual recovery plan, mobilizes resources, and tests real system failovers to validate plan effectiveness under realistic conditions.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Business Continuity & Disaster Recovery Planning 2