Question 1

Mr) Indecisive is unsure of who should be trained on the new Business Continuity Plan that was developed. What should you recommend to him?

Accepted Answer

A) Only Crisis Team members should be trained 
B) Only Business Continuity team members should be trained 
C) Only those who play a part in the Business Continuity Plan implementation should be trained 
D) Every employee should be trained

Question 2

What is Pareto's Law?

Accepted Answer

A) 80% of the effects come from 20% of the causes 
B) Work expands so as to fill the time available for its completion. 
C) Anything that can go wrong will go wrong. 
D) Never attribute to malice that which can be adequately explained by stupidity.

Question 3

In which business continuity practice do you train representatives of the organization's major areas as part of a readiness task?

Accepted Answer

A) Plan and Coordinate Data Gathering and Analysis 
B) Obtain Information about the Organization's Risk Tolerance from Management 
C) Oversee the Ongoing Effectiveness of the Program 
D) Identify Functional Awareness and Training Requirements 
E) Identify and Review Enterprise Business Continuity Strategy Requirements

Question 4

Which term is used to describe the process of returning an organization to its normal state after a crisis?

Accepted Answer

A) Recovery 
B) Resumption 
C) Readiness 
D) Evaluation

Question 5

Damage and Impact Assessment is part of which stage of the Business Continuity Plan?

Accepted Answer

A) Readiness 
B) Prevention 
C) Response 
D) Recovery and Resumption

Question 6

Which of these testing types is a practical or simulated exercise and takes approximately 2 - 4 hours to complete?

Accepted Answer

A) Orientation 
B) Full Scale 
C) Functional 
D) Tabletop

Question 7

Julie has decided to gather opinions from a group of external consultants, via a short questionnaire, who are experienced with these types of projects within the publishing industry. She'll then show them an aggregated list of the whole group's answers, and ask them if they want to change theirs.
What best describes the technique Julie is utilizing to gather valuable information for her project?

Accepted Answer

A) Root cause analysis 
B) Interviewing 
C) Delphi technique 
D) Brainstorming

Question 8

Which of the following exercise types is the closest example to a case study?

Accepted Answer

A) Simulation 
B) Full scale 
C) Tabletop 
D) Orientation

Question 9

What are considered "critical records"? (Select all that apply.)

Accepted Answer

A) Any record that contains confidential, secure company information 
B) Any record that contains personal information 
C) Any record that would cause considerable inconvenience if lost or destroyed 
D) Any record that would be expensive to replace

Question 10

What should be the first step in testing the Business Continuity Plan?

Accepted Answer

A) Assigning responsibility for the testing 
B) Schedule testing date and time 
C) Establishing test goals and expectations 
D) Define the scope of the test

Question 11

In testing scenarios, there are different roles. Which of these roles acts to add realism to the scenario?

Accepted Answer

A) Facilitator 
B) Controller 
C) Simulator 
D) Observer

Question 12

Mr) Indecisive has been given the task of ensuring that critical papers and records that are required to operate the business are available in the event of a crisis. What advice should you give him to help him determine how to complete this task?

Accepted Answer

A) Save electronic backup copies of all documents 
B) Keep multiple copies of the documents in different areas of the building 
C) Set up a fire-proof safe in the building to store the documents 
D) Set up an off-site storage to store the documents

Question 13

What is the term used to describe the process of assessing the number of injuries and amount of property destruction?

Accepted Answer

A) Risk assessment 
B) Damage assessment 
C) Disaster recovery 
D) Mitigation planning

Question 14

A BCP should be regularly reviewed and evaluated. While this should occur on a set schedule, it should also be considered when certain trigger events occur. Which of the following qualify as event triggers?

Accepted Answer

A) BCP testing results 
B) New systems implementation 
C) Company reorganization 
D) New regulatory requirements 
E) All of the above

Question 15

Mr) Indecisive is in charge of the testing phase of the Business Continuity Plan. He is debating whether or not he should schedule his test ahead of time with the participants or create a surprise test instead. What advice should you give him?

Accepted Answer

A) All tests should be previously scheduled with the participants so that they can clear their schedules 
B) Depending on the nature of the test, it might make sense to create a surprise test 
C) All tests should be surprise tests - this will best simulate a real crisis 
D) It does not matter whether the test is a surprise or planned since the results will be the same either way

Exam 1: Certified Business Continuity Professional