CSC Business Continuity & Disaster Recovery Planning 3

Question 1

When a security consultant recommends a 'warm site' recovery strategy, the client should expect:

Accepted Answer

A recovery time of several hours to days as equipment is brought online

Answer

Immediate failover with zero data loss

Answer

A fully staffed and operational duplicate facility at all times

Answer

A mobile trailer unit that can be deployed to any location

Question 2

In the context of business continuity, 'single points of failure' (SPOFs) are critical because they:

Accepted Answer

Represent components whose failure would halt an entire critical process

Answer

Are the most expensive components of any security system

Answer

Are only relevant to IT infrastructure and not physical security operations

Answer

Must be eliminated through redundancy before a BCP can be approved

Question 3

A client asks a security consultant to help document the step-by-step procedures for recovering a specific IT application after a failure. This document is called a:

Accepted Answer

System Recovery Procedure (SRP) or IT Disaster Recovery Plan

Answer

Business Continuity Plan (BCP)

Answer

Risk Register

Answer

Crisis Communication Plan

Question 4

Which of the following best defines 'resilience' in the context of organizational security and continuity?

Accepted Answer

The capacity of an organization to absorb disruption and adapt to maintain acceptable operations

Answer

The ability to prevent all disruptions through proactive security measures

Answer

The speed at which IT systems can be rebuilt after a cyberattack

Answer

The financial reserve set aside to cover losses from a major incident

Question 5

During a post-incident review following a business disruption, the MOST important outcome a security consultant should document is:

Accepted Answer

Lessons learned and recommended improvements to the continuity plan

Answer

The total financial cost of the incident for insurance purposes

Answer

The names of employees who did not follow evacuation procedures

Answer

A formal report to regulatory authorities about the cause of the incident

Question 6

Which of the following continuity concepts refers to the ability to distribute workloads across multiple facilities to maintain operations when one site is compromised?

Accepted Answer

Geographic redundancy

Answer

Mutual aid agreements

Answer

Business Impact Analysis

Answer

Crisis communication protocols

Question 7

A security consultant reviews a client's BCP and notes that the plan was last tested two years ago and has not been updated since a major acquisition. What should the consultant FIRST recommend?

Accepted Answer

Conduct an updated Business Impact Analysis and revise the plan to reflect the new organizational structure

Answer

Immediately activate the plan to test it under live conditions

Answer

Hire additional security staff to cover the gaps identified during the acquisition

Answer

Archive the existing plan and draft a completely new BCP from scratch