CSL CSL Business Continuity & Disaster Recovery Planning 3

Question 1

A full interruption test in disaster recovery differs from a tabletop exercise because it:

Accepted Answer

Involves actually failing over operations to the recovery site under realistic conditions

Answer

Only tests communication trees without system involvement

Answer

Is performed exclusively by external auditors

Answer

Simulates a cyberattack scenario without any real system changes

Question 2

What does the concept of 'cyber resilience' add to traditional business continuity planning?

Accepted Answer

It extends BCP to include the ability to anticipate, withstand, recover from, and adapt to adverse cyber conditions

Answer

It replaces BCP with automated recovery scripts

Answer

It focuses exclusively on preventing cyberattacks rather than recovering from them

Answer

It requires organizations to maintain a second full production environment at all times

Question 3

How often should an organization's Business Continuity Plan be formally reviewed and updated?

Accepted Answer

At least annually and after any significant organizational, technological, or threat landscape change

Answer

Only after a significant disaster has occurred

Answer

Once every five years as part of a major technology refresh

Answer

Every month to remain current with evolving cybersecurity threats

Question 4

What is the primary function of a call tree (notification tree) in a BCP?

Accepted Answer

To provide a structured, cascading communication process for rapidly notifying key personnel during an incident

Answer

To document all inbound customer service calls during a disaster

Answer

To track IT support tickets generated during a recovery effort

Answer

To list all phone numbers for external vendors and service providers

Question 5

Which of the following best describes the relationship between a Disaster Recovery Plan (DRP) and a Business Continuity Plan (BCP)?

Accepted Answer

A DRP is an IT-focused subset of the broader BCP, addressing technical recovery of systems and data

Answer

A DRP is a broader document that encompasses the BCP as a subset

Answer

The BCP and DRP are identical documents used interchangeably

Answer

The BCP addresses short-term recovery while the DRP covers long-term strategic planning

Question 6

When building a business continuity program, a cybersecurity leader should ensure that recovery priorities are determined by:

Accepted Answer

Criticality rankings established during the Business Impact Analysis

Answer

The personal preferences of the CIO and IT leadership team

Answer

The replacement cost of hardware and software systems

Answer

The age of the systems — newer systems should be recovered first

Question 7

Which element is most critical to include in a Disaster Recovery Plan to ensure executability during an actual crisis?

Accepted Answer

Detailed technical step-by-step procedures with clearly assigned roles and responsibilities

Answer

A complete history of all previous incidents and their resolution timelines

Answer

A list of all hardware assets and their purchase prices

Answer

Executive biographies of the leadership team responsible for the plan