ISC2 CC Domain 2: Business Continuity Study Exam Questions by Edward Henriquez

Domain 2: Business ContinuityWhat is the goal of a Business Continuity Plan (BCP)?A. Test incident response capabilitiesB. Ensure critical business functions continue during a disruptionC. Mitigate cybersecurity vulnerabilitiesD. Monitor system performanceAnswer: BKey outcome of a Business Impact Analysis (BIA):A. Identifying threatsB. Prioritizing critical systems and processesC. Writing security policiesD. Testing disaster recovery systemsAnswer: BPart of a disaster recovery plan:A. Incident detection methodsB. Recovery time objectives (RTOs)C. Employee training manualsD. Physical security controlsAnswer: BRecovery Point Objective (RPO):A. Maximum downtime for critical systemsB. Maximum tolerable data lossC. Time to detect a security incidentD. Frequency of backupsAnswer: BTest simulating a disaster to evaluate response plans:A. Tabletop exerciseB. Walkthrough drillC. Full-scale testD. Functional testAnswer: CGoal of high availability:A. Continuous system accessB. Improved system integrityC. Increased network securityD. Encrypted communicationAnswer: ABackup type copying data changed since the last full backup:A. Full backupB. Incremental backupC. Differential backupD. Mirror backupAnswer: BPurpose of redundancy in business continuity:A. Reduce costsB. Ensure system reliabilityC. Improve encryptionD. Eliminate testingAnswer: BAlternate site fully operational during a disaster:A. Hot siteB. Warm siteC. Cold siteD. Shadow siteAnswer: ADifference between disaster recovery and business continuity:A. Disaster recovery focuses on technology; business continuity on processes.B. Disaster recovery focuses on processes; business continuity on compliance.C. Disaster recovery is part of business continuity.D. They are unrelated.Answer: CPurpose of a contingency plan:A. Steps to respond to unexpected eventsB. Methods to eliminate risksC. Techniques for improving software developmentD. Guidelines for encryption protocolsAnswer: AConcept reducing disruption impact by relocating operations:A. Data recoveryB. Risk mitigationC. Disaster recoveryD. Continuity of operationsAnswer: DTool estimating disruption probability and impact:A. Penetration testB. Business Impact Analysis (BIA)C. Security assessmentD. Threat modelAnswer: BTabletop exercise:A. Simulated, non-physical test of plansB. Full activation of business continuity protocolsC. Automated system backupD. Incident monitoring solutionAnswer: AEnsures data recovery after a disaster:A. FirewallsB. BackupsC. Multi-factor authenticationD. EncryptionAnswer: BDocument outlining roles during an incident:A. Business Impact AnalysisB. Disaster Recovery PlanC. Incident Response PlanD. Access Control PolicyAnswer: CDifference between RTO and RPO:A. RTO = downtime; RPO = data loss tolerance.B. RTO = business processes; RPO = system availability.C. RTO = mitigation; RPO = recovery.D. They are identical.Answer: ASystem ensuring uninterrupted power during disasters:A. UPS (Uninterruptible Power Supply)B. Load balancerC. FirewallD. Proxy serverAnswer: APurpose of a warm site:A. Immediate failoverB. Partial functionality with setup requiredC. Basic physical location without equipmentD. Duplicates live systems for seamless recoveryAnswer: BProcess evaluating disaster recovery plan effectiveness:A. Penetration testingB. Backup monitoringC. Plan testing and exercisesD. Incident responseAnswer: C