SSP Business Continuity & Resilience 2 — Questions and Answers
Question 1: Which metric defines the maximum tolerable period that a system can be offline before causing unacceptable business impact?
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Maximum Tolerable Downtime (MTD) (Correct answer)
- Mean Time to Recovery (MTTR)
Correct answer: Maximum Tolerable Downtime (MTD)
Maximum Tolerable Downtime (MTD) is the longest period an organization can survive without a critical function before the impact becomes unacceptable.
Question 2: During a tabletop exercise, a facilitator introduces an unexpected complication mid-scenario. What is the primary purpose of this technique?
- To confuse participants and test memorization
- To test the team's ability to adapt plans to evolving conditions (Correct answer)
- To identify which employees need additional training
- To validate the accuracy of the written BCP document
Correct answer: To test the team's ability to adapt plans to evolving conditions
Injecting unexpected complications tests the team's adaptive decision-making, which is more realistic than following a static script.
Question 3: A company's BCP identifies a critical vendor as a single point of failure. Which resilience strategy directly addresses this risk?
- Increasing the vendor's contract value
- Dual-sourcing or qualifying an alternate supplier (Correct answer)
- Documenting the vendor's contact information in the plan
- Extending the Recovery Time Objective
Correct answer: Dual-sourcing or qualifying an alternate supplier
Dual-sourcing eliminates the single point of failure by ensuring a qualified backup supplier can fulfill the same function.
Question 4: What is the key difference between a hot site and a warm site in disaster recovery?
- Hot sites are located in warmer climates for reliability
- Hot sites have pre-loaded data and are immediately operational; warm sites require some setup time (Correct answer)
- Warm sites are fully staffed 24/7 while hot sites are unmanned
- Hot sites use cloud infrastructure while warm sites use on-premises equipment
Correct answer: Hot sites have pre-loaded data and are immediately operational; warm sites require some setup time
A hot site is fully configured and operational with current data, while a warm site has hardware but requires data restoration and configuration before use.
Question 5: An organization experiences a cyberattack during an ongoing natural disaster. This scenario is best described as a:
- Secondary incident
- Cascading or compound disaster (Correct answer)
- Force majeure event
- Crisis amplification
Correct answer: Cascading or compound disaster
A cascading or compound disaster occurs when multiple simultaneous or sequential events interact, complicating response and recovery efforts.
Question 6: Which element of a Crisis Communication Plan ensures that only authorized individuals speak on behalf of the organization during an incident?
- Media monitoring protocol
- Designated spokesperson policy (Correct answer)
- Social media blackout procedure
- Internal notification tree
Correct answer: Designated spokesperson policy
A designated spokesperson policy controls messaging and prevents contradictory or unauthorized statements from reaching stakeholders and media.
Question 7: After restoring operations following a disaster, which activity formally closes out the incident response phase and transitions to normal operations?
- After-action review
- Reconstitution declaration (Correct answer)
- Business Impact Analysis update
- Risk register revision
Correct answer: Reconstitution declaration
A reconstitution declaration formally signals that primary systems are restored and the organization is transitioning back to normal operations.
SSP Business Continuity & Resilience 2
Which metric defines the maximum tolerable period that a system can be offline before causing unacceptable business impact?