An organization can use manual procedures to keep critical work going while its information systems are being restored. This is an example of supporting business continuity.
6 Disaster Recovery and Business Continuity Online Quiz Questions
Use this free practice quiz with 20 questions to review 6 Disaster Recovery and Business Continuity, test your knowledge, and prepare for your next test or exam.
A identifies critical business processes, their dependencies, and the effects of an interruption over time.
A disaster recovery plan is being drafted. Which responsibility should it explicitly assign so recovery can be formally activated and prioritized?
- A
The vendor that supplies the largest system
- B
The person or role authorized to declare a disaster and approve recovery priorities
- C
The first responder who arrives at the affected facility
- D
The team responsible for publishing routine staff newsletters
A business process can tolerate losing transactions from no more than 45 minutes before a disruption. What RPO should its recovery requirement specify? Enter the value in minutes.
What is the term for the longest interruption an organization can withstand before the impact becomes unacceptable? Enter the full term.
A backup job completed successfully last night. That result alone proves that the organization can restore the data and resume service.
- A
True
- B
False
Which practices help protect backups and provide evidence that they can be recovered? Select all that apply.
- A
Use access controls and encryption where appropriate.
- B
Keep every backup copy directly accessible through the ordinary production network.
- C
Keep copies offline or otherwise segmented from ordinary network access.
- D
Test retrieval and restoration, rather than relying only on job completion reports.
A disaster recovery plan should document response-team responsibilities, contact methods, and escalation paths, including those for relevant .
A team is deciding what to include in backups so it can rebuild a service after a disruption. Which approach best supports that goal?
- A
Only the latest copy of business data; system rebuild materials can be recreated later.
- B
Data and staff contact lists, but not system configurations or software.
- C
Data plus the configurations, software, and relevant documentation needed to rebuild services.
- D
Only complete server images, without checking whether the data can be retrieved.
Responders need to check whether written recovery steps are clear and complete, without restoring systems. Which exercise best fits this objective?
- A
A tabletop exercise, where participants discuss a scenario without changing systems.
- B
A walk-through, where responders follow documented steps and identify gaps.
- C
A technical restoration test, where selected data or systems are restored in a controlled environment.
- D
A full recovery exercise, where services are recovered at an alternate environment or site.
After an exercise, which actions provide useful evidence of recovery performance and support improvement? Select all that apply.
- A
Compare actual recovery time and the age of restored data with the RTO and RPO.
- B
Assume the objectives were met if the team finished its exercise checklist.
- C
Check whether essential dependencies work.
- D
Avoid recording findings until the next disruption occurs.
- E
Record findings and assign corrective actions.
Which approach best helps keep disaster recovery procedures usable and current when an incident affects systems or facilities?
- A
Store the only copy on the systems being recovered and review it on a fixed schedule regardless of changes.
- B
Keep copies accessible to everyone without security controls, so no one is blocked from them.
- C
Store accessible copies securely outside potentially affected systems or facilities, and review the plan when systems, personnel, vendors, or business needs change.
- D
Keep a printed copy at one facility and do not revise it after approval.
A disruption has made several business applications unavailable, and a team is preparing a recovery exercise. Explain how it should determine recovery requirements, organize and carry out recovery, and use the exercise results to improve its readiness.
A backup job reports success. Does that alone confirm that the organization can restore the data when needed?
- A
True
- B
False
A response team discusses a disruption scenario, explains its decisions, and does not change any systems. Which type of recovery exercise is this?
- A
A technical restoration test
- B
A tabletop exercise
- C
A full recovery exercise
- D
A walk-through
What analysis identifies critical business processes, their dependencies, and the effects of interruption over time?
A business application depends on both network connectivity and identity services. To account for recovery dependencies, what should the recovery team do?
- A
Restore the business application first, then identify which services it needs.
- B
Restore the systems with the largest storage capacity first.
- C
Restore network connectivity and identity services before the dependent business application.
- D
Restore systems in alphabetical order.
An organization wants to reduce the risk that an attacker who compromises its production network can alter or delete all its backups. Which backup design best addresses that risk?
- A
Keep all backup copies on the production network so they can be reached quickly.
- B
Keep backup copies offline or otherwise segmented from ordinary network access.
- C
Give every production administrator unrestricted access to backup credentials.
- D
Retain only backups that are stored on the same systems as production data.
A business process must resume within 6 hours of a disruption and can tolerate at most 30 minutes of lost transactions. What RTO, in hours, should its supporting system target?
A company changes a vendor that provides a service its recovery plan depends on. What should the company do with the plan?
- A
Review it only after a disaster has occurred.
- B
Keep it unchanged as long as the organization still has backups.
- C
Review it only when the recovery team requests a new exercise.
- D
Review it when systems, personnel, vendors, or business needs change.