GRC Business Continuity and Resilience 2

Question 1

Which metric defines the maximum acceptable amount of data loss measured in time during a disaster?

Accepted Answer

Recovery Point Objective (RPO)

Answer

Recovery Time Objective (RTO)

Answer

Maximum Tolerable Downtime (MTD)

Answer

Mean Time to Recover (MTTR)

Question 2

A company activates its BCP after a hurricane destroys its primary data center. Which phase of the BCP lifecycle is this?

Accepted Answer

Plan activation and execution

Answer

Plan development

Answer

Testing and exercises

Answer

Business impact analysis

Question 3

What is the primary purpose of a tabletop exercise in business continuity?

Accepted Answer

To discuss and walk through scenario responses without live systems

Answer

To physically simulate failover to a hot site

Answer

To measure actual RTO achievement

Answer

To test backup restoration speed

Question 4

Which BCP component addresses how an organization will communicate with employees, customers, and stakeholders during a crisis?

Accepted Answer

Crisis communication plan

Answer

Business impact analysis

Answer

IT disaster recovery plan

Answer

Risk register

Question 5

A firm's BIA reveals that its order-processing system must be restored within 4 hours. This figure represents the:

Accepted Answer

RTO

Answer

RPO

Answer

MTD

Answer

MTPD

Question 6

Which type of alternate site provides fully operational infrastructure with real-time data replication and can be activated within minutes?

Accepted Answer

Hot site

Answer

Cold site

Answer

Warm site

Answer

Mobile recovery site

Question 7

During a BCP review, a team identifies a supplier whose failure would halt production for 30 days. This represents which type of risk?

Accepted Answer

Single point of failure in the supply chain

Answer

Reputational risk

Answer

Residual risk

Answer

Inherent risk only