CSL CSL Business Continuity & Disaster Recovery Planning 2

Question 1

Which international standard provides the primary framework for Business Continuity Management Systems (BCMS)?

Accepted Answer

ISO 22301

Answer

ISO/IEC 27001

Answer

NIST SP 800-53

Answer

COBIT 2019

Question 2

What is 'Maximum Tolerable Downtime' (MTD) in business continuity planning?

Accepted Answer

The total length of time a business process can be unavailable before causing irreversible harm

Answer

The time it takes to complete a full disaster recovery failover

Answer

The maximum number of hours the IT team can work during a crisis

Answer

The time between the last backup and the occurrence of a disaster

Question 3

A warm site disaster recovery option is best characterized as:

Accepted Answer

A facility with hardware and connectivity ready but requiring data restoration before use

Answer

A fully mirrored production environment with live data replication

Answer

An empty building with power and network connections only

Answer

A cloud-based virtual environment activated on demand

Question 4

In the context of BCP, what does 'crisis communications' primarily address?

Accepted Answer

Timely, accurate, and coordinated information sharing with employees, customers, media, and regulators during a disruption

Answer

Encrypting all internal communications during a security incident

Answer

Establishing a VPN for remote employee access during disasters

Answer

Documenting all post-incident technical findings for legal purposes

Question 5

What is the correct sequence for developing a Business Continuity Plan?

Accepted Answer

Conduct BIA → Develop recovery strategies → Document the BCP → Test and maintain the plan

Answer

Test plan → Conduct BIA → Develop recovery strategies → Train staff

Answer

Document the BCP → Conduct BIA → Test plan → Develop strategies

Answer

Train staff → Conduct BIA → Document the BCP → Test plan

Question 6

Which metric helps determine how frequently an organization should perform data backups?

Accepted Answer

RPO (Recovery Point Objective)

Answer

RTO (Recovery Time Objective)

Answer

MTD (Maximum Tolerable Downtime)

Answer

MTTF (Mean Time to Failure)

Question 7

A cybersecurity leader is reviewing the organization's DR plan and finds that the RTO for a critical system is 4 hours but the MTD is 2 hours. What action is required?

Accepted Answer

Improve the recovery strategy so the RTO is less than or equal to the MTD

Answer

No action needed — RTO and MTD do not need to be aligned

Answer

Reduce the RPO to match the MTD

Answer

Extend the MTD to accommodate the current RTO