CSL CSL Business Continuity & Disaster Recovery Planning 3

Question 1

A full interruption test in disaster recovery differs from a tabletop exercise because it:

Accepted Answer

Involves actually failing over operations to the recovery site under realistic conditions

Answer

A full interruption test (also called a full-scale test) involves actually activating the recovery site and failing over live operations, providing the most realistic validation of the DR plan.

Question 2

What does the concept of 'cyber resilience' add to traditional business continuity planning?

Accepted Answer

It extends BCP to include the ability to anticipate, withstand, recover from, and adapt to adverse cyber conditions

Answer

Cyber resilience broadens traditional BCP by incorporating the ability to not only recover from cyber incidents but also to adapt and continue operations while under attack or amid degraded conditions.

Question 3

How often should an organization's Business Continuity Plan be formally reviewed and updated?

Accepted Answer

At least annually and after any significant organizational, technological, or threat landscape change

Answer

Best practices and standards like ISO 22301 require BCP reviews at least annually and following major changes (mergers, system upgrades, new regulations) to ensure plans remain effective and accurate.

Question 4

What is the primary function of a call tree (notification tree) in a BCP?

Accepted Answer

To provide a structured, cascading communication process for rapidly notifying key personnel during an incident

Answer

A call tree creates a cascading notification structure where each notified person contacts the next, ensuring rapid and systematic communication to all necessary stakeholders during a crisis.

Question 5

Which of the following best describes the relationship between a Disaster Recovery Plan (DRP) and a Business Continuity Plan (BCP)?

Accepted Answer

A DRP is an IT-focused subset of the broader BCP, addressing technical recovery of systems and data

Answer

A DRP is an IT-focused component that addresses the technical recovery of infrastructure, systems, and data, while the BCP encompasses a broader organizational resilience strategy that includes DRP as a component.

(CSL) Cybersecurity Leadership Certification Practice Test

(CSL) Cybersecurity Leadership Certification Practice Test

CSL CSL Business Continuity & Disaster Recovery Planning 3