Cissp-Domain 6-Business Continuity & Disaster Recovery Planning

Front 1

involve the identification, selection, implementation, testing and updating of processes and specific actions necessary to prudently protect criticial busin precesses from the effects of major system and network disruptions and to ensure the timely restoration of business ops if significant disruptions occur

Back 1

BCP and DRP

Front 2

BIA stands for

Back 2

Business Impact Analysis

Front 3

MTD stands for

Back 3

Maximum Tolerable Downtime

Front 4

first step in building BC program

Back 4

Project initiation and management

Front 5

activites of project initiation and mgmt

Back 5

1) obtain senior mgmt support
2) define a project scope, the objectives, to be achieved and planning assumptions
3) estimate the project resources needed (human and financial)
4) Define a timeline and major deliverables

Front 6

Senior leadership's two major goals

Back 6

1) Grow the business
2) Protect the brand

Front 7

What are the risk to a corporation for not having BC/DRP?

Back 7

1) Financial
2) Reputational
3) Regulatory

Front 8

Formula for calculating financial risk

Back 8

P * M = C
P: Probability of harm
M: Magnitude of harm
C: Cost of prevention

Front 9

Prudent man rule

Back 9

exercise the same care in managing the company affairs as in managing one's own affairs

Front 10

1. Which of the following is considered the most important component of the enterprisewide continuity planning program?

Back 10

c. Executive management support

Front 11

2. During the threat analysis phase of the continuity planning methodology, which of the following threats should be addressed?
a. Physical security
b. Environmental security
c. Information security
d. All of the above

Back 11

d. All of the above

Front 12

3. The major objective of the business impact assessment process is to:
a. Prioritize time-critical business processes
b. Determine the most appropriate recovery time objective for business processes
c. Assist in prioritization of IT applications and networks
d. All of the above

Back 12

d. All of the above

Front 13

4. Continuity of IT technologies or IT network infrastructure capabilities is addressed in what type
of continuity plan?

Back 13

a. Disaster recovery plans

Front 14

5. Crisis management planning focuses management attention on the following:

Back 14

Preplanning that will enable management to anticipate and react in the event of emergency

Front 15

6. Performing benchmarking and peer review relative to enterprise continuity planning business processes is a valuable method to do all of the following except:
a. Help identify leading business continuity planning processes and practices
b. Allow realistic goal setting for action plans and agendas
c. Provide a method for developing metrics and measures for the continuity planning process
d. Compare continuity planning personnel salary levels

Back 15

d. Compare continuity planning personnel salary levels

Front 16

7. An effective continuity plan will contain all of the following type of information except for:
a. Prioritized list of business processes or IT systems to be recovered
b. The business impact assessment report
c. Recovery team structures and assignments
d. The primary and secondary location where backup and recovery activities will take place

Back 16

b. The business impact assessment report

Front 17

8. All but one of the following are advantages of automating or utilizing continuity planning software:
a. It standardizes training approaches.
b. It provides a platform for management and audit oversight.
c. It eases long-term continuity plan maintenance.
d. It provides business partners with an enterprisewide view of the continuity planning infrastructure.

Back 17

It provides business partners with an enterprisewide view of the continuity planning infrastructure.

Front 18

9. Which is the least important reason for developing business continuity and disaster recovery
plans?
a. Disasters really do occur
b. Budgeting IT expenditures
c. Good business practice and standard of due care
d. Legal or regulatory compliance

Back 18

b. Budgeting IT expenditures

Front 19

10. When conducting the business impact assessment, business processes are examined relative to
all but one of the following criteria:
a. Customer interruption impacts
b. Embarrassment or loss of confidence impacts
c. Executive management disruption impacts
d. Revenue loss potential impacts

Back 19

c. Executive management disruption impacts

Front 20

11. The primary purpose of formalized continuity planning test plans is to accomplish all except:
a. Define test scope and objectives
b. Define test timeframes
c. Define test costs
d. Define the test scrip

Back 20

c. Define test costs

Front 21

12. The primary reason for conducting continuity planning tests is to:

Back 21

b. Ensure that continuity plans are current and viable

Front 22

13. During development of alternative recovery strategies, all of the following activities should be performed except:
Use the prioritized business process maps developed during the BIA to map time-critical
supporting resources
a. Use the prioritized business process maps developed during the BIA to map time-critical
supporting resources
b. Develop short-and long-term testing and maintenance strategies
c. Prepare cost estimates for acquisition of continuity support resources
d. Provide executive management with recommendations on acquiring appropriate continuity resources

Back 22

Develop short-and long-term testing and maintenance strategies

Front 23

14. The primary phases of the enterprise continuity planning implementation methodology include all of the following except:
a. Current state assessment phase
b. Execution phase
c. Design and development phase
d. Management phase

Back 23

b. Execution phase

Front 24

15. Which of the following statements most appropriately describes the timeliness of processes and supporting resources prioritization and recovery?

Back 24

c. The processes are time critical

Front 25

what are the phases of Business continuity planning?

Back 25

1. Project Mgt & Initiation
2. Business Impact Analysis
3. Recovery strategy
4. Plan design
5. Development and testing, Maintenance, awareness and training

Front 26

Which phrase best defines a business continuity/disaster recovery plan?

Back 26

The adequate preparations and procedures for the continuation of all business functions

Front 27

Regardless of industry, which element of legal and regulatory requirements are all industries subject to?

Back 27

Prudent man rule

Front 28

Which of the following statements best describe the extent to which an organization should address business continuity or disaster recovery planning?

Back 28

Continuity planning is a significant corporate issue and should include all parts or functions of the company

Front 29

Business impact analysis is performed to identify

Back 29

The exposures to loss to the organization

Front 30

During risk analysis phase of the planning, which of the following actions could manage threats or mitigate the effects of an event?

Back 30

Implementing procedural controls

Front 31

The reason to implement additional controls or safeguards is to:

Back 31

reduce the impact of the threat

Front 32

Which of the following statement most accurately describes BIA?

Back 32

A BIA establishes the effect of disruptions on the organization

Front 33

The term disaster recovery commonly refers to

Back 33

The recovery of the technology environment

Front 34

Which of the following terms best describes the effort to determine the consequences of disruption that could result from a disaster

Back 34

Business Impact Analysis

Front 35

A key advantage of using a cold site as a recovery option is that is

Back 35

a less expensive recovery option

Front 36

The elements of risk are:

Back 36

Threats, assets and mitigating controls

Front 37

The term RTO means

Back 37

Recovery Time objective

Front 38

two terms that mean the amount of time the business can function without that application before significant business impact occurs

Back 38

Recovery Time Objective (RTO) or Maximum Tolerable Downtime (MTD)

Front 39

IF a company wants the most efficient restore from tape backup
a) full backup
b) Incremental backup
c) partial backup
d) differential backup

Back 39

a) full backup

Front 40

One of the advantages of a hot site recovery solution is

Back 40

highly available

Front 41

which of the following models is not acceptable for exercising the business continuity plan?

Back 41

Halting a production application or function

Front 42

Which of the following is the primary desired result of any well-planned business continuity exercise?

Back 42

Identifies strengths and weaknessess

Front 43

A business continuity plan should be updated and maintained

Back 43

Immediately following an exercise, Following a major change in personnel, and after installing new software

Front 44

how often should DR proceedures be reviewed and audited

Back 44

every 3 months..audited every year

Front 45

BS 25999 defines

Back 45

Business Continuity Management

Front 46

Two other names for BCP

Back 46

Business Continuity mgt (BCM) and Continuity of Operations (COOP)

Front 47

BCM Life-cycle

Back 47

1) Analyze your business
2) Analyze the risks
3) Develop your strategy
4) Develop your plan
5) Rehearse the plan

Front 48

BCP Phases

Back 48

1) Project scope and planning
2) BIA
3) BC & Recovery Strategy
4) Plan design and Development
5) implementation
6) Restoration/DR
7) Feedback & Plan Mgmt

Front 49

RPO (recovery Point objective) measures

Back 49

tolerance for data loss. The point to which information must be restored in order to enable the organizaiton to function without unacceptable loss of data

Front 50

test where representatives get together in a mtg and review the plan collectively

Back 50

Structured walk-through

Front 51

what process identifies business function to be recovered during a disaster?

Back 51

BIA

Front 52

A contingency plan should be written to:

Back 52

prepare for reasonable threats

Front 53

The most important reason to cerate a BCP

Back 53

increase the chances of a business surviving a disaster

Front 54

Who/what guides a BCP project

Back 54

steering commitee

Front 55

what is the first step in creating a BCP

Back 55

perform a BIA

Front 56

which recovery alternative has the highest readiness?

Back 56

mirrored site

Front 57

given thtat a business has recovered to a vendor hot side, what is a reasonable solution for a long term outage?

Back 57

cold site

Front 58

for what interruption is a near side backup reasonable?

Back 58

Fire

Front 59

which backup has the worst RPO

Back 59

Full

Front 60

what is an effective way to verify a contact list?

Back 60

Simulation

Front 61

when should a full interruption test be conducted?

Back 61

only with senior executive authorization

Front 62

When restoring to normal following the use of a a DRP which is most important?

Back 62

synchronized data between alternative site and normal site

Front 63

BCP awareness and trng should be extended to

Back 63

All peron who may be on-site

Front 64

because BCP and DRP plans and procedures contain propietrary and sensitive info and they are updated frequently, their distributioin should be limited to:

Back 64

BC team and secured at the EOC and off-site storage

Front 65

An evacuation drill is schuled and a em amployee reports tow work with leg cast. As BC coordinator, you direct him/her to:

Back 65

follow evacuation proceedures

Front 66

Under which of the followiln situations should a trashcan fire be considered a disaster?

Back 66

the fire caused critical business systems to be diabled for longer thean the the MTD

Front 67

Emergency action are taken at the beginningstage of a disaster with the objectives of perenting injuries, loss of life and

Back 67

containing damage

Front 68

After completion of a BIA, recover strategies must be developed. The primary concern of these recovery strategies is

Back 68

Meeting the pre-determined time frame

Front 69

Operational recover strategies can include hot sites, warm sites, cold sites and MPC. Wich woul be the mos tappropriate for a buiness wysstem whoes MTD is 3hrs?

Back 69

MPC

Front 70

According to local policy, disaste recovery team members meet annually to discuess business recoery strategies. Each team member describes the seriies of action taken by their dept. in the vent of an emergency. Action are critqued based on efficiency of a system recovery and impact to the business unites. This is best described as why type of testing straegy?

Back 70

Structured walk-thru

Front 71

Test where you give each business a copy of the plan, have them run through a checklist to make sure all relevant points are covered?

Back 71

checklist

Front 72

What is the best way to assure the reliability of backup tapes which are being mainteained at a disaster recovery site?

Back 72

Retrieve the tapes and verify that they can be read

Front 73

RPO for "non-essential"

Back 73

30 days

Front 74

RPO for "normal"

Back 74

7 days

Front 75

RPO for "important"

Back 75

72 hrs

Front 76

RPO for "urgent"

Back 76

24 hrs

Front 77

RPO for "critical/essential"

Back 77

minutes to hrs

Front 78

Replication

Back 78

Disk replication or recovery images optimized recover. Data is written to 2 disks and provides high availability

Front 79

Distributed processign

Back 79

server (same or mult. locations) are configured with load balancine and clustering

Front 80

Electronic vaulting

Back 80

data is backed up to remote drives off-site or over high-quality comm links

Front 81

Remote journaling

Back 81

transactions or journal files are periodically transmitted to the remote drives located off-site

Front 82

media archives

Back 82

media are backed up and transported to an off-site location (full, incrmental, differential)

Front 83

SAN

Back 83

high performance local or remote networks that permit backup by heterogenous computers

Front 84

Which of the following threats cripples a business, destroys the original facility, and required shor and long-term recovery planning

Back 84

Catastrophe (most significant impact > disaster)

Front 85

what is the main reason business continuity plans become outdated?

Back 85

They are viewed as a project

Front 86

what is the switched fabric in a SAN?

Back 86

The paths between the nodes and the back-end storage devices. It provides fault tolerance and redundancy

Front 87

what step is not part of the BIA

Back 87

report findings to the Company

Front 88

and off-site facility should be how far from the primary facility

Back 88

>= 25mi

Front 89

First step in planning disaster response proceddures

Back 89

identify a team

Front 90

which involves actually moving some systems..parallel v simulation

Back 90

parallel

Front 91

BIA is performed to identify

Back 91

the exposures to loss to the organization

Front 92

What phrase best defines a BC/DRP

Back 92

the adequate prepartions and procedures for the continuation of all business functions

Front 93

backup Most efficient in recovery

Back 93

Full backup