SOC Business Continuity and Disaster Recovery

Question 1

In disaster recovery planning, what does RPO (Recovery Point Objective) define?

Accepted Answer

The maximum acceptable amount of data loss measured in time

Answer

RPO defines the maximum acceptable amount of data loss measured in time, directly guiding how frequently backups must occur.

Question 2

Which SOC 2 Trust Services Criterion is most directly supported by business continuity planning?

Accepted Answer

Availability

Answer

The Availability criterion requires that systems are available for operation as committed, making BCP essential to satisfying it.

Question 3

A 'hot site' in disaster recovery planning is best described as:

Accepted Answer

A fully equipped and operational backup facility with real-time data replication

Answer

A hot site is a fully operational duplicate environment with real-time data synchronization, enabling near-immediate failover.

Question 4

What is the primary output of a Business Impact Analysis (BIA)?

Accepted Answer

A prioritized list of critical business functions and their maximum tolerable downtime

Answer

A BIA identifies critical business functions, their interdependencies, and the maximum tolerable downtime for each, forming the foundation of a BCP.

Question 5

During a SOC 2 audit, which evidence would best demonstrate effective disaster recovery controls?

Accepted Answer

Documented DR test results, including identified gaps and completed remediation actions

Answer

Documented DR test results with evidence of remediation demonstrate that controls are operating effectively, which is the standard of proof in a SOC 2 engagement.

(SOC) System and Organization Controls Certification Practice Test

(SOC) System and Organization Controls Certification Practice Test

SOC Business Continuity and Disaster Recovery