Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISSP > Business Continuity and Disaster Recovery Planning > Flashcards

Business Continuity and Disaster Recovery Planning Flashcards

1
Q

What is the purpose of a BIA

A

To determine how time sensitive different business functions are so you can determine how best to prioritize recovery operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When analyzing the software you company uses to perform certain functions, what should you consider?

A

Whether employees can continue to use the software from a different network location
Whether the software is necessary for performing key business functions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What should you take into account when considering the amount of work that might be lost in a disaster

A

The amount of work that can tolerably be lost without harming the organization
How quickly work in progress will need to be restored to workstations at an alternate site.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What 2 types of plans are required for an IT organization

A

BCP - business continuity plan

DRP - disaster recovery plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does a BCP do?

A

designed to mitigate the impact of a disaster by ensuring that critical business operations continue.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does a DRP do?

A

outlines how to restore the normal operational state of an enterprise within the minimum possible time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

3 steps involved in developing a BCP

A

assessing the impact of a potential disaster in terms of operational disturbance and data loss
formulating appropriate plans to ensure the continuous availability of critical systems
planning and implementing regular BCP training, testing, and maintenance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

First phase of BCP - Project Initiation

A

gain support from senior management
defining project scope
defining a timeline for the project
developing a company policy for implementing the plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which requirements must the BCPs of the US financial institutions meet?

A

They should be reassessed annually

the should focus on maintaining and continuing business functions rather than just on technology recovery.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What should the planning team document during the creation of a BCP or DRP?

A

contact details for critical staff
ways in which the business will be impacted by possible disasters
potential alternative sites for running critical systems and operations
mission critical data or records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

3 ways to respond to risk

A

accept
transfer
mitigate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

3 primary goals of a BIA

A

prioritize systems in terms of their criticality
estimate maximum acceptable down times
determine resource requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which are key considerations when analyzing impact on business applications?

A

how a new location might impact employees’ ability to use an application
the relationship between applications and business functions, even those that aren’t time sensitive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are key considerations when analyzing the impact of incidents on work in progress?

A

how quickly data must be recovered in the aftermath of a disaster
the percentage of employees current work that can be lost at a given time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

cold site

A

empty spaces containing no technical equipment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which phrase best defines a business continuity/disaster recovery plan?
A. a set of plans for preventing a disaster
B. an approved set of preparations and sufficient procedures for responding to a disaster.
C. A set of preparations and procedures for responding to a disaster without management approval
D. The adequate preparations and procedures for the continuation of all organization functions.

A

D. The adequate preparations and procedures for the continuation of all organization functions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q 
Regardless of the industry, which element of legal and regulatory requirements are all industries subject to?
A. Sarbanes-Oxley
B. HIPAA
C. Due care
D. BS25999
A

C. Due care

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which of the following statements best describes the extent to which an organization should address business continuity or disaster recovery planing?
A. Continuity planning is a significant organization issue and should include all parts or functions of the company.
B. Continuity planning is a significant technology issue and the recovery of technology should be its primary focus.
C. Continuity planning is required only where there is complexity in voice and data communications.
D. Continuity planning is a significant management issue and should include the primary functions specified by management.

A

A. Continuity planning is a significant organization issue and should include all parts or functions of the company.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Business impact analysis is performed to best identify
A. The impacts of a threat to the organization operations
B. The exposures to loss to the organization
C. The impacts of a risk on the organization
D. The cost efficient way to eliminate threats

A

B. The exposures to loss to the organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

During the risk analysis phase of the planning, which of the following actions could best manage threats or mitigate the effects of an event?
A. Modifying the exercise scenario?
B. developing recovery procedures
C. increasing reliance on key individuals
D. Implementing procedural controls.

A

D. Implementing procedural controls.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q 
The best reason to implement additional controls of safeguards is to 
A. deter or remove the risk
B. identify and eliminate the threat
C. reduce the impact of the threat
D. identify the risk and the threat
A

C. reduce the impact of the threat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which of the following statements best describes business impact analysis?
A. Risk analysis and business impact analysis are two different terms describing the same project effort
B. A business impact analysis calculates the probability of disruptions to the organization.
C. A business impact analysis is critical to development of a business continuity plan.
D. A business impact analysis establishes the effect of disruptions on the organization.

A

D. A business impact analysis establishes the effect of disruptions on the organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q 
The term disaster recovery refers to the recovery of
A. organization operations
B. technology environment
C. manufacturing environment
D. personnel environments
A

B. technology environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q 
Which of the following terms best describes the effort to determine the consequences of disruptions that could result from a disaster?
A. Business impact analysis
B. Risk analysis
C. Risk assessment
D. Project problem definition
A

A. Business impact analysis

25
Q

The best advantage of using a cold site as a recovery option is
A. is a less expensive recovery option
B. can be configured and made operational for any organization function
C. is preconfigured for communications and can be customized for organization functions.
D. is the most available option for testing server and communications restorations.

A

A. is a less expensive recovery option

26
Q

The elements of risk are as follows
A. natural disasters and man made disasters
B. threats, assets, and mitigating factors
C. risk and business impact analysis
D. business impact analysis and mitigating factors

A

B. threats, assets, and mitigating factors

27
Q

The term recovery time objective RTO means
A. The maximum time a service or system can be unavailable
B. The amount of time a disaster recovery should take
C. The time required to switch from a primary site to an alternate.
D. The time which must elapse before enacting a crisis communication plan

A

A. The maximum time a service or system can be unavailable

28
Q 
The most efficient restore from tape backup is
A. full backup
B. incremental
C. partial
D. differential
A

A. full backup

29
Q 
One of the advantages of a hot site recovery solution is that it
A. is less expensive
B. is highly available
C. does not incur downtime
D. no maintenance is required
A

B. is highly available

30
Q

Which of the following methods is not acceptable for exercising the business continuity plan?
A. table top exercise
B. call exercise
C. simulated exercise
D. halting a production application or function

A

D. halting a production application or function

31
Q

Which of the following is the primary desired result of any well planned business continuity exercise?
A. identifies plan strengths and weaknesses
B. satisfies management requirements
C. complies with auditor’s requirements
D. Maintains shareholder confidence.

A

A. identifies plan strengths and weaknesses

32
Q

A business continuity plan is best updated and maintained
A. annually or when requested by auditors
B. only when new versions of software are deployed
C. only when new hardware is deployed
D. During the configuration and change management process

A

D. During the configuration and change management process

33
Q

Which of the following is most important for successful business continuity?
A. senior leadership support
B. strong technical support staff
C. extensive wide area network infrastructure
D. an integrated incident response team

A

A. senior leadership support

34
Q 
Which of the following is the best alternate site approach if the recovery time objective of a service is two months?
A. cold site
B. reciprocal agreement
C. warm site
D. hot site
A

A. cold site

35
Q 
A service's recovery point objective is zero.  Which approach best ensures the requirement is met?
A. raid 6 with a hot site alternative
B. raid 0 with a warm site alternative
C. raid 0 with a cold site alternative
D. raid 6 with a reciprocal agreement
A

A. raid 6 with a hot site alternative

36
Q

The NIST organization has defined best practices for creating continuity plans. Which of the following phases deals with identifying and prioritizing critical functions and systems?
A. Identify preventative controls
B. Develop the continuity planning policy statement
C. Develop recovery strategies
D. Conduct the business impact analysis

A

D. Conduct the business impact analysis

37
Q

As his company’s business continuity coordinator, Matthew is responsible for helping recruit members to the business continuity planning committee. Which of the following does not correctly describe this effort?
A. Committee members should be involved with the planning stages, as well as the testing and implementation stages
B. The smaller the team, the better, to keep meetings under control
C. The business continuity coordinator should work with management to appoint committee members
D. The team should consist of people from different departments across the company

A

B. The smaller the team, the better, to keep meetings under control

38
Q

A business impact analysis is considered a functional analysis. Which of the following is not carried out during a business impact analysis?
A. A parallel or full-interruption test
B. The application of a classification scheme based on criticality levels
C. The gathering of information via interviews
D. Documentation of business functions

A

A. A parallel or full-interruption test

39
Q

Which of the following is the best way to ensure that the company’s backup tapes can be restored and used at a warm site?
A. Ask the offsite vendor to test them and label the one’s that were properly read.
B. Test them on the vendor’s machine
C. Retrieve tapes from the offsite facility and verify that the equipment from the original site can read them.
D. Inventory each tape kept at the vendor’s site twice a month.

A

C. Retrieve tapes from the offsite facility and verify that the equipment from the original site can read them.

40
Q

An approach to alternate offsite facilities is to establish a reciprocal agreement. Which of the following describes the pros and cons of a reciprocal agreement?
A. It is fully configured and ready to operate within a few hours, but is the most expensive of the offsite choices.
B. It is an inexpensive option, but takes the most time and effort to get up and running after a disaster.
C. It is a good alternative for companies that depend upon proprietary software, but annual testing is not usually available.
D. It is the cheapest of the offsite choices, but mixing operations could introduce many security issues.

A

D. It is the cheapest of the offsite choices, but mixing operations could introduce many security issues.

41
Q

Which of the following steps come first in a business impact analysis?
A. Calculate the risk for each different business function.
B. Identify critical business functions.
C. Create data-gathering techniques
D. Identify vulnerabilities

A

C. Create data-gathering techniques

42
Q 
The operations team is responsible for defining which data gets backed up and how often.  Which type of backup process backs up files that have been modified since the last time all data was backed up?
A. Incremental
B. Full
C. Partial
D. Differential
A

D. Differential

43
Q

After a disaster occurs, a damage assessment needs to take place. Which of the following steps occurs last in a damage assessment?
A. Determine the cause of the disaster
B. Identify the resources that must be replaced immediately
C. Declare a disaster
D. Determine how long it will take to bring critical functions back online

A

C. Declare a disaster

44
Q 
Of the following plans, which establishes senior management and a head-quarters after a disaster?
A. Continuity of operations plan
B. Cyber-incident response plan
C. Occupant emergency plan
D. IT contingency plan
A

A. Continuity of operations plan

45
Q

It is not usual for business continuity plans to become out of date. Which of the following is not a reason why plans become outdated?
A. Changes in hardware, software, and applications
B. Infrastructure and environment changes
C. Personnel turnover
D. That the business continuity process is integrated into the change management process

A

D. That the business continuity process is integrated into the change management process

46
Q

Pre-planned business continuity procedures provide organizations a number of benefits. Which of the following is not a capability enabled by business continuity planning?
A. Resuming critical business functions
B. Letting business partners know your company is unprepared
C. Protecting lives and ensuring safety
D. Ensuring survivability of the business

A

B. Letting business partners know your company is unprepared

47
Q 
Management support is critical to the success of a business continuity plan.  Which of the following is the most important to be provided to management to obtain their support?
A. Business case
B. Business Impact Analysis
C. Risk Analysis
D. Threat report
A

A. Business case

48
Q 
Gizmos and Gadgets have restored its original facility after a disaster. What should be moved in first?
A. Management
B. Most critical systems
C. Most critical functions
D. Least critical functions
A

D. Least critical functions

49
Q

Which of the following is a critical first step in disaster recovery and contingency planning?
A. Plan testing and drills
B. Complete a business impact analysis
C. Determine offsite backup facility alternatives
D. Organize and create relevant documentation

A

B. Complete a business impact analysis

50
Q

Which of the following is not a reason to develop and implement a disaster plan?
A. Provide steps for a post disaster recovery
B. Extend backup operations to include more than just backing up data
C. Outline business functions and systems
D. Provide procedures for emergency responses

A

C. Outline business functions and systems

51
Q 
Business continuity plans can be assessed via a number of tests.  Which type of test continues up to the point of actual relocation to an offsite facility and actual shipment of replacement equipment?
A. Parallel Test
B. Checklist test
C. Structured walk through test
D. Simulation test
A

D. Simulation test

52
Q 
With what phase of a business continuity plan does a company proceed when it is ready to move back into its original site or a new site?
A. Reconstitution phase
B. Recovery phase
C. Project initiation phase
D. Damage assessment phase
A

A. Reconstitution phase

53
Q 
Several teams should be involved in carrying out the business continuity plan.  Which team is responsible for starting the recovery of the original site?
A. Damage assessment team
B. BCP team
C. Salvage team
D. Restoration team
A

C. Salvage team

54
Q 
ACME paid a software vendor to develop specialized software, and that vendor has gone out of business.  ACME does not have access to the code and therefore cannot keep it updated.  What mechanism should the company have implemented to prevent this from happening?
A. reciprocal agreement
B. Software escrow
C. Electronic vaulting
D. Business interruption insurance
A

B. Software escrow

55
Q

Which of the following incorrectly describes the concept of executive succession planning?
A. Predetermined steps protect the company if a senior executive leaves
B. Two or more senior staff cannot be exposed to a particular risk at the same time.
C. It documents the assignment of deputy roles
D. It covers assigning a skeleton crew to resume operations after a disaster.

A

D. It covers assigning a skeleton crew to resume operations after a disaster.

56
Q 
What ISO/IEC spec pertains to technology readiness for business continuity?
A. ISO/IEC 27031
B. ISO/IEC 27005
C. ISO/IEC BS7799
D. ISO/IEC 2899
A

A. ISO/IEC 27031

57
Q

What is the Recovery Time Objective?

A

earliest possible time period and a service level within which a business process must be restored after a disaster to avoid unacceptable consequences.

58
Q

What is Work Recovery Time?

A

MTD (Max Tolerable Downtime) - RTO

59
Q

What is the Recovery Point Objective?

A

The acceptable amount of data loss measured in time.

CISSP (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions