Back to Security Education and Awareness

Business Continuity and Disaster Recovery Planning

5 minutes 5 Questions

Business continuity and disaster recovery planning refers to the process of creating and maintaining strategies to ensure the availability, integrity, and confidentiality of an organization's data during a disaster, like a natural calamity, security breach, or system failure. This concept involves …

Test mode:
Start practice test
CISSP - Business Continuity and Disaster Recovery Planning Example Questions

Test your knowledge of Business Continuity and Disaster Recovery Planning

Question 1

After a major disaster, which of the following would be the best team structure to efficiently handle incident recovery?

Correct Answer: Recovery team with clearly defined roles and responsibilities

A recovery team with clearly defined roles and responsibilities will be more efficient in handling incident recovery because each member knows their part. Assigning a single manager or relying on just IT personnel may leave gaps in the recovery process. Having all employees pitch in or setting up competition won't assure an organized response. Senior management only discussing with external vendors overlooks internal recovery tasks.

Question 2

During a threat assessment, a company identifies that a water leak in the server room could cause severe business disruptions. What is the most cost-effective mitigation strategy to address this risk?

Correct Answer: Install water detection sensors in the server room

Installing water detection sensors in the server room is a cost-effective strategy to quickly detect and respond to water leaks. Relocating or constructing a new server room would be very expensive and time-consuming. Training staff or having IT staff constantly monitor the room is not as efficient as using a detection system. Offsite backups are good but do not directly address the leak issue.

Question 3

Which of the following tests provides the most accurate insight into the readiness of an organization's disaster recovery plan?

Correct Answer: Full-scale test

A full-scale test represents a realistic and comprehensive test of all DRP components. It provides the most accurate insight into the readiness of an organization. A checklist test, structured walk-through test, and simulation test are less comprehensive, as they focus on specific aspects or procedures of recovery. Parallel tests are valuable, but they don't reflect live conditions as well as full-scale tests. Partial tests might not provide information about all aspects involved.

More Business Continuity and Disaster Recovery Planning questions
12 questions (total)
Start 12 question test