GRC Business Continuity and Resilience 2

Question 1

Which metric defines the maximum acceptable amount of data loss measured in time during a disaster?

Accepted Answer

Recovery Point Objective (RPO)

Answer

RPO specifies the point in time to which data must be restored, defining the maximum tolerable data loss window.

Question 2

A company activates its BCP after a hurricane destroys its primary data center. Which phase of the BCP lifecycle is this?

Accepted Answer

Plan activation and execution

Answer

Plan activation and execution is the phase where the BCP is invoked in response to an actual disruption event.

Question 3

What is the primary purpose of a tabletop exercise in business continuity?

Accepted Answer

To discuss and walk through scenario responses without live systems

Answer

Tabletop exercises are discussion-based sessions where team members talk through their responses to a hypothetical scenario.

Question 4

Which BCP component addresses how an organization will communicate with employees, customers, and stakeholders during a crisis?

Accepted Answer

Crisis communication plan

Answer

The crisis communication plan defines messaging, channels, and responsibilities for notifying all relevant parties during a disruption.

Question 5

A firm's BIA reveals that its order-processing system must be restored within 4 hours. This figure represents the:

Accepted Answer

RTO

Answer

RTO is the target duration within which a system must be restored after a disruption to avoid unacceptable consequences.

(GRC) Governance, Risk, and Compliance Certification Practice Test