CTO Business Continuity & Disaster Recovery 1 — Questions and Answers
Question 1: What is the primary purpose of a Business Continuity Plan (BCP)?
- To ensure critical operations continue during and after a disruption (Correct answer)
- To prevent all types of disasters from occurring
- To replace the need for cyber insurance coverage
- To document detailed IT infrastructure specifications
Correct answer: To ensure critical operations continue during and after a disruption
A BCP ensures critical business functions continue during and after a disaster, minimizing the operational and financial impact on the organization.
Question 2: Which metric defines the absolute maximum tolerable period during which a business function can be disrupted before causing unacceptable consequences?
- Recovery Point Objective (RPO)
- Recovery Time Objective (RTO)
- Maximum Tolerable Downtime (MTD) (Correct answer)
- Mean Time Between Failures (MTBF)
Correct answer: Maximum Tolerable Downtime (MTD)
Maximum Tolerable Downtime (MTD) defines the longest period a business function can be unavailable before causing unacceptable damage, serving as the ceiling for all recovery objectives.
Question 3: What does Recovery Time Objective (RTO) define in a disaster recovery plan?
- The maximum amount of data loss acceptable measured in time
- The target duration within which a system must be restored after disruption (Correct answer)
- The frequency at which data backups should be performed
- The geographic distance between primary and backup facilities
Correct answer: The target duration within which a system must be restored after disruption
RTO specifies the target time within which business processes must be restored after a disaster to avoid unacceptable consequences to the organization.
Question 4: What does Recovery Point Objective (RPO) represent in BC/DR planning?
- The priority ranking of systems to be recovered first
- The geographic location where backup data is stored
- The target time for restoring systems after a disaster
- The maximum acceptable amount of data loss measured in time (Correct answer)
Correct answer: The maximum acceptable amount of data loss measured in time
RPO defines the maximum age of data that must be recoverable from backup, indicating how much data loss the organization can tolerate before the impact becomes unacceptable.
Question 5: Which disaster recovery site strategy maintains a fully operational duplicate of the production environment with real-time data replication?
- Cold site
- Warm site
- Hot site (Correct answer)
- Pilot light
Correct answer: Hot site
A hot site is a fully operational duplicate facility with real-time data replication, enabling near-immediate failover with minimal data loss and the fastest possible recovery.
Question 6: What is the primary purpose of conducting a Business Impact Analysis (BIA)?
- To calculate the total cost of IT infrastructure investments
- To identify critical business functions and quantify the impact of their disruption (Correct answer)
- To assess vendor performance during and after outages
- To determine employee compensation levels during crisis events
Correct answer: To identify critical business functions and quantify the impact of their disruption
A BIA identifies critical business processes, their dependencies, and the financial and operational impact of disruptions, forming the essential foundation of all BC/DR planning.
Question 7: Which type of DR test validates recovery procedures through scenario-based discussion without activating actual recovery systems or disrupting operations?
- Full interruption test
- Parallel test
- Tabletop exercise (Correct answer)
- Simulation drill
Correct answer: Tabletop exercise
A tabletop exercise involves key stakeholders discussing their roles in a hypothetical disaster scenario without interrupting operations or activating actual recovery procedures.
CTO Business Continuity & Disaster Recovery 1
What is the primary purpose of a Business Continuity Plan (BCP)?