CSL CSL Business Continuity & Disaster Recovery Planning

Question 1

What is the primary purpose of a Business Continuity Plan (BCP)?

Accepted Answer

To ensure critical business functions can continue during and after a disruption

Answer

To document all IT system configurations for auditors

Answer

To assign blame and accountability following a security incident

Answer

To comply with insurance policy requirements after a disaster

Question 2

What does RTO (Recovery Time Objective) define in disaster recovery?

Accepted Answer

The maximum acceptable time to restore a system or process after a disruption

Answer

The maximum amount of data loss an organization can tolerate

Answer

The total cost of recovering from a disaster

Answer

The frequency at which data backups must be performed

Question 3

A Business Impact Analysis (BIA) is conducted primarily to:

Accepted Answer

Determine the financial and operational impact of disruptions to critical processes

Answer

Identify which employees are essential during a crisis

Answer

Audit compliance with NIST cybersecurity frameworks

Answer

Evaluate vendor SLAs for third-party services

Question 4

Which recovery site type provides fully operational systems and data that can be activated immediately in a disaster?

Accepted Answer

Hot site

Answer

Cold site

Answer

Warm site

Answer

Mobile site

Question 5

Who should hold ultimate ownership and accountability for the Business Continuity Plan?

Accepted Answer

Senior executive leadership, typically the CEO or Board

Answer

The Chief Information Officer (CIO)

Answer

The IT Disaster Recovery Team Lead

Answer

The Chief Information Security Officer (CISO)

Question 6

What is the primary purpose of a tabletop exercise in business continuity?

Accepted Answer

To walk stakeholders through a simulated disaster scenario to identify gaps and validate plans

Answer

To test the physical failover of systems to a backup data center

Answer

To train new employees on their roles and responsibilities

Answer

To verify that data backups are complete and restorable

Question 7

RPO (Recovery Point Objective) is best described as:

Accepted Answer

The acceptable amount of data loss measured in time

Answer

The time required to restore systems to full capacity

Answer

The priority order in which systems are restored

Answer

The minimum staffing level needed during a disaster