Business Continuity Planning
Exam Bank
Course Introduction
Business Continuity Planning explores the strategies, principles, and frameworks needed to ensure that organizations can maintain essential functions during and after a disruptive event. The course covers risk assessment, business impact analysis, recovery strategies, and the development and testing of continuity plans. Students will learn to identify vulnerabilities, create contingency measures, and coordinate effective responses to crises such as natural disasters, cyber-attacks, and other operational threats. Through case studies and practical exercises, learners gain the skills necessary to design, implement, and manage comprehensive business continuity programs that protect stakeholders and preserve organizational resilience.
Recommended Textbook
Principles of Incident Response and Disaster Recovery 1st Edition by Michael E. Whitman
Available Study Resources on Quizplus
11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243 Page 2
Chapter 1: Contingency Planning Within Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) A(n)____ is any clearly identified attack on the organization's information assets that would threaten the assets' confidentiality,integrity,or availability.
A)threat
B)Trojan horse
C)worm
D)incident
Answer: D
Q2) A ____ is a document that expresses how an organization ensures that critical business functions continue at an alternate location while the organization recovers its ability to function at the primary site if a catastrophic incident or disaster occurs.
A)risk assessment plan
B)business continuity plan
C)Trojan horse
D)worm
Answer: B
Q3) Information has the characteristic of ____________________ when disclosure or exposure to unauthorized individuals or systems is prevented.
Answer: confidentiality
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) The number-one budgetary expense for disaster recovery.
A)BIA
B)Attack scenarios
C)Online questionnaire
D)Recovery time objective
E)Use case diagram
F)System log
G)Insurance
H)Act of human error
I)Compromises to intellectual property
Answer: G
Q2) The ____ is the point in time by which systems and data must be recovered after an outage as determined by the business unit.
A)recovery point objective
B)dependency objective
C)recovery time objective
D)training objective
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) Conversations with ____________________ help identify the skills and abilities of the team,as well as the specific needs of the end users.
Answer: stakeholders
Q2) ____ are important when team members are preparing advisories and procedures.
A)Mathematical skills
B)Writing skills
C)Medical skills
D)Forensic skills
Answer: B
Q3) ____ services provide assistance and information to help prepare,protect,and secure constituent systems in anticipation of attacks,problems,or events.
A)Proactive
B)Security
C)Reactive
D)Forensic
Answer: A
Q4) The performance of ____________________ services directly reduces the number of incidents in the future.
Answer: proactive
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) What are the steps involved in monitoring networks for signs of intrusion?
Q2) _________________________ is the process of evaluating circumstances around organizational events,determining which events are possible incidents,or incident candidates,and then determining whether or not the event constitutes an actual incident.
Q3) A(n)____________________ can adapt its reaction activities based on both guidance learned over time from the administrator as well as circumstances present in the local environment.
Q4) The failure of an IDS system to react to an actual attack event is known as a ____.
A)false positive
B)false negative
C)Confidence Value
D)site policy
Q5) A ____ is a high-interaction honeypot designed to capture extensive information on threats.
A)DNS cache
B)honeypot Farm
C)DNS farm
D)network-based IDS
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) Process by which a mathematical algorithm turns a variable-length input into a fixed-length output.
A)IR plan
B)After-action review
C)Interview
D)Incident
E)System log
F)Forensics
G)War game
H)Computer forensics
I)Hashing
Q2) The ____ investigates crimes involving U.S.currency,counterfeiting,and certain cases involving credit card fraud and identity theft.
A)FBI
B)U.S.Secret Service
C)U.S.Treasury Department
D)CIA
Q3) What is the three-step methodology followed by computer forensics?
Q4) List seven best practices,provided by CERT,for responding to an intrusion.
Q5) What are the key steps in the Protect and Forget reaction strategy?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) ____ performs two different parity computations or the same computation on overlapping subsets of the data.
A)RAID level 4
B)RAID level 5
C)RAID level 6
D)RAID level 7
Q2) The term disk mirroring is used interchangeably with ____.
A)RAID level 1
B)RAID levels 3 and 4
C)RAID level 5
D)RAID level 6
Q3) What are the advantages and disadvantages of the Towers of Hanoi rotation method?
Q4) ____ creates one larger logical volume across several available hard disk drives and stores the data in segments,called stripes,across all the disk drives in the array.
A)RAID 0
B)RAID level 1
C)RAID level 2
D)RAID levels 3 and 4
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) List five practices that should be considered when addressing server vulnerabilities.
Q2) This group may also interface with the data management group to restore data from backups to their storage areas.
A)Disaster management team
B)Business interface team
C)Actions after
D)Network recovery team
E)Storage recovery team
F)Data management team
G)Vendor contact team.
H)Logistics team.
I)Business interface team.
Q3) What is involved in training for the DR plan?
Q4) Which of the following is not usually an insurable loss?
A)Electrostatic discharge
B)Sever windstorm
C)Fire
D)Lightening
Page 9
Q5) List five practices for Web site contingency planning.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) The ____ team is responsible for working with the remainder of the organization to assist in the recovery of nontechnology functions.
A)damage assessment
B)data management
C)logistics
D)business interface
Q2) Crucial during a disaster.
A)Storage recovery team
B)Vendor relationships
C)Testing
D)Alert roster
E)Sequential roster
F)Recovery phase
G)Resumption phase
H)Restoration phase
I)Data-management practices
Q3) What is the difference between a DR plan structured walk-through and a DR plan simulation?
Q4) What is the difference between the business interface team and the logistics team?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) How does remote journaling differ from electronic vaulting?
Q2) What are the responsibilities of the applications recovery team,the data management team,and the logistics team?
Q3) The ____ section of the business continuity policy provides an overview of the information storage and retrieval plans of the organization.
A)scope
B)training requirements
C)roles and responsibilities
D)special considerations
Q4) Unlike DR planning,the identification of critical business functions and the resources to support them are the cornerstone of the process used to create the business continuity (BC)plan.
A)True
B)False
Q5) ____ involves the transfer of live transactions to an off-site facility.
A)Remote journaling
B)Database shadowing
C)Six-tape rotation
D)Electronic vaulting
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) With respect to the continuity planning process,what is the importance of communication?
Q2) The ____ is the command and control group and may consist of one or two individuals,including the team leader,responsible for coordinating all BC implementation functions.
A)business continuity management team
B)operations team
C)computer setup team
D)network recovery team
Q3) The ____ is one of two dominantly recognized professional institutions that certifies business continuity professionals.
A)Business Continuity Institute
B)Disaster Recovery Institute
C)Incident Handling Institute
D)Disaster Preparedness Institute
Q4) What are the requirements for the CBCP certification?
Q5) What is the difference between the data management team and logistics team?
Page 12
Q6) What are some of the options available for BC training?
Q7) What is the difference between the business continuity team and the operations team?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) ____________________ kits are a good idea to have available at any organization,but they do little good if the people present at the crisis or other event do not know how to properly use the contents of the kits.
Q2) A(n)____ is the physical accountability of all personnel and is essential in determining an individual's whereabouts during an emergency (whether they are still inside a building or not).
A)personnel count
B)employee count
C)head count
D)team leader count
Q3) A ____ is defined by the ICM as a disruption in the company's business that occurs without warning and is likely to generate news coverage and may adversely impact employees,investors,customers,suppliers,and other stakeholders.
A)humanitarian crisis
B)sudden crisis
C)business crisis
D)smoldering crisis
Q4) List four typical causes of a crisis.
Q5) What is the difference between management and leadership?
To view all questions and flashcards with answers, click on the resource link above. Page 14