CSC Business Continuity & Disaster Recovery Planning 3

Question 1

When a security consultant recommends a 'warm site' recovery strategy, the client should expect:

Accepted Answer

A recovery time of several hours to days as equipment is brought online

Answer

A warm site has partially configured equipment and connectivity, typically requiring hours to days of setup before full operations resume, balancing cost and recovery speed.

Question 2

In the context of business continuity, 'single points of failure' (SPOFs) are critical because they:

Accepted Answer

Represent components whose failure would halt an entire critical process

Answer

A SPOF is any component or process that, if it fails, causes the entire system or critical function to stop, making it a high-priority target for redundancy planning.

Question 3

A client asks a security consultant to help document the step-by-step procedures for recovering a specific IT application after a failure. This document is called a:

Accepted Answer

System Recovery Procedure (SRP) or IT Disaster Recovery Plan

Answer

A System Recovery Procedure or IT Disaster Recovery Plan contains the specific technical steps required to restore a particular system or application after failure.

Question 4

Which of the following best defines 'resilience' in the context of organizational security and continuity?

Accepted Answer

The capacity of an organization to absorb disruption and adapt to maintain acceptable operations

Answer

Organizational resilience is the adaptive capacity to absorb stress, recover functionality, and adapt to new circumstances while maintaining acceptable operations.

Question 5

During a post-incident review following a business disruption, the MOST important outcome a security consultant should document is:

Accepted Answer

Lessons learned and recommended improvements to the continuity plan

Answer

Lessons learned and plan improvements are the most valuable continuity outcomes from a post-incident review, ensuring the organization is better prepared for future events.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Business Continuity & Disaster Recovery Planning 3