Question 1

Which of the following business continuity plans guides the organization back to normalcy?

Accepted Answer

A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans 
A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans D

Question 2

Which of the following locations is fully redundant with real-time replication from the production site?

Accepted Answer

A)  Reciprocal site 
B)  Mirrored site 
C)  Mobile site 
D)  Cold site 
A)  Reciprocal site 
B)  Mirrored site 
C)  Mobile site 
D)  Cold site B

Question 3

Which of the following testing exercises are discussion-based only and don't involve deploying equipment or other resources?

Accepted Answer

A)  Functional exercises 
B)  Full-scale testing 
C)  Tabletop exercises 
D)  Plan audits 
A)  Functional exercises 
B)  Full-scale testing 
C)  Tabletop exercises 
D)  Plan audits C

Question 4

Which of the following refers to a location that is fully operational and ready to move into in the event of an emergency or disaster?

Accepted Answer

A)  Hot site 
B)  Warm site 
C)  Cold site 
D)  Mobile site 
A)  Hot site 
B)  Warm site 
C)  Cold site 
D)  Mobile site

Question 5

Which of the following is an example of an operational issue that can lead to an emergency or disaster?

Accepted Answer

A)  Biological accident 
B)  Air contaminants 
C)  Degradation of power 
D)  Sabotage 
A)  Biological accident 
B)  Air contaminants 
C)  Degradation of power 
D)  Sabotage

Question 6

Which of the following represents the acceptable data loss?

Accepted Answer

A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective 
A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective

Question 7

Which of the following best describes a mobile site?

Accepted Answer

A)  A backup facility that has power and HVAC but no equipment 
B)  A self-contained unit that has hardware, software, and peripherals 
C)  A fully operational location that is ready for immediate move in and contains all data 
D)  An operational location that contains all equipment, but data must be restored 
A)  A backup facility that has power and HVAC but no equipment 
B)  A self-contained unit that has hardware, software, and peripherals 
C)  A fully operational location that is ready for immediate move in and contains all data 
D)  An operational location that contains all equipment, but data must be restored

Question 8

Which of the following is the official notification that the organization is no longer operating in emergency or disaster mode?

Accepted Answer

A)  Validation 
B)  Activation 
C)  Deactivation 
D)  Resumption 
A)  Validation 
B)  Activation 
C)  Deactivation 
D)  Resumption

Question 9

Which of the following best describes a warm site?

Accepted Answer

A)  A backup facility that has power and HVAC but no equipment 
B)  A self-contained unit that has hardware, software, and peripherals 
C)  A fully operational location that is ready for immediate move in and contains all data 
D)  An operational location that contains all equipment but data must be restored 
A)  A backup facility that has power and HVAC but no equipment 
B)  A self-contained unit that has hardware, software, and peripherals 
C)  A fully operational location that is ready for immediate move in and contains all data 
D)  An operational location that contains all equipment but data must be restored

Question 10

Which of the following is the total length of time an essential business function can be unavailable without causing significant harm to the organization?

Accepted Answer

A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective 
A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective

Question 11

Which of the following business continuity plans focus on the immediate and near-term alternative workplace and business processes?

Accepted Answer

A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans 
A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans

Question 12

Which of the following statements best describes functional exercises?

Accepted Answer

A)  Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations 
B)  Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function 
C)  Discussion-based exercises that do not involve deploying equipment or other resources 
D)  Systematic walkthrough of the procedures to determine disaster readiness 
A)  Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations 
B)  Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function 
C)  Discussion-based exercises that do not involve deploying equipment or other resources 
D)  Systematic walkthrough of the procedures to determine disaster readiness

Question 13

Which of the following business continuity plans focus on the initial response to a disaster and includes plan activation, notification, evacuation, and communication?

Accepted Answer

A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans 
A)  Response plans 
B)  Contingency plans 
C)  Recovery plans 
D)  Resumption plans

Question 14

Which of the following is an example of willful damage?

Accepted Answer

A)  Cybercrime 
B)  User or operator error 
C)  Hazardous chemical exposure 
D)  Public health emergency 
A)  Cybercrime 
B)  User or operator error 
C)  Hazardous chemical exposure 
D)  Public health emergency

Question 15

A __________ organization is one that has the ability to quickly adapt and recover from known or unknown changes to the environment.

Accepted Answer

A)  dependent 
B)  resistant 
C)  tolerable 
D)  resilient 
A)  dependent 
B)  resistant 
C)  tolerable 
D)  resilient

Question 16

Which of the following best describes full-scale testing?

Accepted Answer

A)  Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations 
B)  Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function 
C)  Discussion-based exercises that do not involve deploying equipment or other resources 
D)  Systematic walkthrough of the procedures to determine disaster readiness 
A)  Testing conducted at the enterprise level with a full simulation of a disaster, suspending all normal operations 
B)  Scenario-driven exercises that are limited in scope to simulate a failure of a critical business function 
C)  Discussion-based exercises that do not involve deploying equipment or other resources 
D)  Systematic walkthrough of the procedures to determine disaster readiness

Question 17

Following a disaster, which of the following recovery phases encompasses systems that provide a general operating environment, including environmental and physical controls?

Accepted Answer

A)  Communications recovery 
B)  Facilities recovery 
C)  Infrastructure recovery 
D)  Network recovery 
A)  Communications recovery 
B)  Facilities recovery 
C)  Infrastructure recovery 
D)  Network recovery

Question 18

Which of the following describes evacuations and shelter-in-place procedures for a threat or incident?

Accepted Answer

A)  Occupant emergency plan (OEP) 
B)  Business continuity threat assessment (BCT
A)  
C)  Business continuity risk assessment (BCR
A)  
D)  Continuity of operations plan (COOP) 
A)  Occupant emergency plan (OEP) 
B)  Business continuity threat assessment (BCT
A)  
C)  Business continuity risk assessment (BCR
A)  
D)  Continuity of operations plan (COOP)

Question 19

Which of the following refers to the maximum amount of time a system resource can be unavailable before there is an unacceptable impact on other system resources or business processes?

Accepted Answer

A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective 
A)  Maximum tolerable downtime 
B)  Maximum tolerable uptime 
C)  Recovery time objective 
D)  Recovery point objective

Question 20

Which of the following individuals or groups is vested by the Board of Directors with the authority to make decisions related to disaster preparation, response, and recovery?

Accepted Answer

A)  Chief Operating Officer 
B)  IT department 
C)  Department managers 
D)  Business Continuity Team 
A)  Chief Operating Officer 
B)  IT department 
C)  Department managers 
D)  Business Continuity Team

Which of the following business continuity plans guides the organization back to normalcy?

Which of the following locations is fully redundant with real-time replication from the production site?

Which of the following testing exercises are discussion-based only and don't involve deploying equipment or other resources?

Which of the following refers to a location that is fully operational and ready to move into in the event of an emergency or disaster?

Which of the following is an example of an operational issue that can lead to an emergency or disaster?

Which of the following represents the acceptable data loss?

Which of the following best describes a mobile site?

Which of the following is the official notification that the organization is no longer operating in emergency or disaster mode?

Which of the following best describes a warm site?

Which of the following is the total length of time an essential business function can be unavailable without causing significant harm to the organization?

Which of the following business continuity plans focus on the immediate and near-term alternative workplace and business processes?

Which of the following statements best describes functional exercises?

Which of the following business continuity plans focus on the initial response to a disaster and includes plan activation, notification, evacuation, and communication?

Which of the following is an example of willful damage?

A __________ organization is one that has the ability to quickly adapt and recover from known or unknown changes to the environment.

Which of the following best describes full-scale testing?

Following a disaster, which of the following recovery phases encompasses systems that provide a general operating environment, including environmental and physical controls?

Which of the following describes evacuations and shelter-in-place procedures for a threat or incident?

Which of the following refers to the maximum amount of time a system resource can be unavailable before there is an unacceptable impact on other system resources or business processes?

Which of the following individuals or groups is vested by the Board of Directors with the authority to make decisions related to disaster preparation, response, and recovery?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters

Exam 12: Business Continuity Management

Which of the following business continuity plans guides the organization back to normalcy?

Which of the following locations is fully redundant with real-time replication from the production site?

Which of the following testing exercises are discussion-based only and don't involve deploying equipment or other resources?

Which of the following refers to a location that is fully operational and ready to move into in the event of an emergency or disaster?

Which of the following is an example of an operational issue that can lead to an emergency or disaster?

Which of the following represents the acceptable data loss?

Which of the following best describes a mobile site?

Which of the following is the official notification that the organization is no longer operating in emergency or disaster mode?

Which of the following best describes a warm site?

Which of the following is the total length of time an essential business function can be unavailable without causing significant harm to the organization?

Which of the following business continuity plans focus on the immediate and near-term alternative workplace and business processes?

Which of the following statements best describes functional exercises?

Which of the following business continuity plans focus on the initial response to a disaster and includes plan activation, notification, evacuation, and communication?

Which of the following is an example of willful damage?

A __________ organization is one that has the ability to quickly adapt and recover from known or unknown changes to the environment.

Which of the following best describes full-scale testing?

Following a disaster, which of the following recovery phases encompasses systems that provide a general operating environment, including environmental and physical controls?

Which of the following describes evacuations and shelter-in-place procedures for a threat or incident?

Which of the following refers to the maximum amount of time a system resource can be unavailable before there is an unacceptable impact on other system resources or business processes?

Which of the following individuals or groups is vested by the Board of Directors with the authority to make decisions related to disaster preparation, response, and recovery?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Nist Cybersecurity Framework

Filters