SOC Business Continuity and Disaster Recovery

Question 1

In disaster recovery planning, what does RPO (Recovery Point Objective) define?

Accepted Answer

The maximum acceptable amount of data loss measured in time

Answer

The time required to restore all systems after a disaster

Answer

The physical location designated for disaster recovery operations

Answer

The sequence of steps for restoring systems in priority order

Question 2

Which SOC 2 Trust Services Criterion is most directly supported by business continuity planning?

Accepted Answer

Availability

Answer

Confidentiality

Answer

Privacy

Answer

Processing Integrity

Question 3

A 'hot site' in disaster recovery planning is best described as:

Accepted Answer

A fully equipped and operational backup facility with real-time data replication

Answer

A backup facility requiring 48 to 72 hours to become fully operational

Answer

A leased facility with only basic infrastructure and no pre-installed systems

Answer

A cloud-based archive for storing encrypted backup snapshots

Question 4

What is the primary output of a Business Impact Analysis (BIA)?

Accepted Answer

A prioritized list of critical business functions and their maximum tolerable downtime

Answer

A revised vendor contract with updated SLAs

Answer

A financial projection of quarterly recovery costs

Answer

A list of cybersecurity vulnerabilities in production systems

Question 5

During a SOC 2 audit, which evidence would best demonstrate effective disaster recovery controls?

Accepted Answer

Documented DR test results, including identified gaps and completed remediation actions

Answer

The organization's cyber liability insurance policy declarations page

Answer

Customer testimonials about the organization's historical service reliability

Answer

Vendor invoices for backup hardware and off-site storage services

Question 6

What does RTO (Recovery Time Objective) define in a disaster recovery plan?

Accepted Answer

The maximum time allowed to restore a system or process after a disruption

Answer

The maximum acceptable data loss expressed as a duration before the incident

Answer

The total cost budgeted for disaster recovery operations annually

Answer

The percentage of systems that must be operational to resume business

Question 7

A tabletop exercise in business continuity planning is best described as:

Accepted Answer

A structured, discussion-based simulation where teams walk through disaster scenarios

Answer

A full-scale technical test that activates failover systems in a live environment

Answer

A certification audit conducted by a third-party assessor of the DR plan

Answer

A quarterly infrastructure review that validates backup integrity and restore times