Disaster Recovery Planning

Correct Answer: Uninterruptible power supplies (UPS)

The best solution to prevent a power outage from affecting operations is to implement Uninterruptible power supplies (UPS). These devices provide power to a server or other hardware components when the primary source is unavailable to prevent business interruption. They also provide additional benefits, such as power conditioning to deal with power surges and drops. On the other hand, more offsite backups won't prevent the power outage issue but could offer data recovery options in case of failure. Increased network redundancy doesn't address the problem of power capacity during an outage. Physical access controls are not related to power outages but are useful for preventing unauthorized physical access.

Correct Answer: Data backup and storage offsite

The best answer is 'Data backup and storage offsite'. The company experienced massive data loss due to physical damage (flood). Having data backups and offsite storage would mean that even if the main site was destroyed, the company could restore the lost data from a safe location. This is a core component of disaster recovery planning. 'Increase network redundancy' wouldn't help much in this case as it is more about ensuring network connectivity and doesn't protect against physical data loss. 'Perform more frequent risk assessments' could have potentially helped identify the flood risk, but it would not directly prevent data loss. Lastly, 'Upgrade physical security measures' might prevent from theft or unauthorized access, but not from natural disasters like a flood.

Correct Answer: Alternate site for operations

In a scenario where a company's headquarters is destroyed by a natural disaster like an earthquake, halting all operations, the priority in the disaster recovery plan should be 'Alternate site for operations'. It is because operations need to be resumed to mitigate loss and this can be achieved only if there's an alternate site to operate from. Having 'Regular software updates' simply isn't the immediate priority during a disaster recovery and in any case, without a site of operation, updates wouldn't matter. Ensuring 'More frequent security audits' could be a part of a larger plan, but not immediate post-disaster action, and a 'Faster internet connection' would again require an operational site.