CTO Business Continuity & Disaster Recovery 3

Question 1

What defines a 'cold site' in disaster recovery planning?

Accepted Answer

A backup facility with basic utilities that requires significant equipment setup before use

Answer

A data center maintained at low temperatures for optimal server cooling performance

Answer

A cloud environment with pre-loaded system images ready to activate on demand

Answer

A testing environment completely isolated from all production systems

Question 2

How should a CTO prioritize technology systems for disaster recovery based on Business Impact Analysis findings?

Accepted Answer

By criticality of business functions supported and their associated RTO/RPO requirements

Answer

By acquisition cost, ensuring the most expensive systems are protected first

Answer

By system age, replacing the oldest and most vulnerable systems last

Answer

By department headcount, ensuring the largest departments recover operations first

Question 3

What is the primary purpose of DR runbooks in an organization's disaster recovery program?

Accepted Answer

To provide step-by-step procedures for executing recovery tasks consistently during a crisis

Answer

To document the history of past disasters and lessons learned for organizational memory

Answer

To outline the financial budget allocation and approval process for disaster recovery investments

Answer

To enumerate all recovery vendors and their contractual service level obligations

Question 4

What is geo-redundancy in the context of enterprise disaster recovery architecture?

Accepted Answer

Distributing systems and data across geographically separate locations to survive regional disasters

Answer

Using multiple vendors for the same service to eliminate single-vendor dependency risk

Answer

Implementing redundant network connections and power feeds within a single data center

Answer

Maintaining multiple versions of application code across separate source code repositories

Question 5

How does cyber resilience differ from traditional disaster recovery in a CTO's strategic planning?

Accepted Answer

Cyber resilience encompasses continuous service delivery despite ongoing attacks by integrating proactive security into BC/DR

Answer

Cyber resilience and traditional DR are functionally identical concepts with different marketing terminology

Answer

Traditional DR is broader and more comprehensive than modern cyber resilience practices

Answer

Cyber resilience eliminates the need for traditional business continuity planning frameworks

Question 6

How frequently should a CTO ensure BC/DR plans are formally tested and updated to remain effective?

Accepted Answer

Annually at minimum, with additional testing triggered by significant changes, threats, or incidents

Answer

Only when required by regulatory bodies, auditors, or compliance mandates

Answer

Every five years as part of the organization's regular strategic planning cycles

Answer

Only when a significant IT infrastructure change or technology upgrade occurs

Question 7

In BC/DR governance, what do Service Level Agreements (SLAs) between the CTO and business units primarily define?

Accepted Answer

Commitments regarding system availability, recovery objectives, and IT support during disruptions

Answer

Legal liability caps for technology failures and associated financial penalties

Answer

Compensation and on-call benefits for IT staff required to respond during declared disasters

Answer

Minimum capital budgets that business units must allocate annually to disaster recovery infrastructure