CBCP DRII CERTIFICATION EXAM
QUESTIONS WITH ACCURATE
SOLUTIONS
1. Which of the following statements is true?
| | | | | | |
a. Conforming to a standard is mandatory
| | | | | |
b. Complying with a regulation is voluntary
| | | | | |
c. Auditors do not assess business continuity programs against regulations
| | | | | | | | |
d. Auditors assess business continuity programs against standards and
| | | | | | | |
regulations - Precise Answer ✔✔d. Auditors assess business continuity
| | | | | | | | |
programs against standards and regulations
| | | | |
2. What is the value of a business continuity policy statement?
| | | | | | | | | |
a. It forces middle management to comply with senior directives
| | | | | | | | |
b. It shows employees how to do their part in the planning process
| | | | | | | | | | | |
c. It shows leadership's support for the business continuity planning process
| | | | | | | | | |
d. It provides leadership a direction in which to make future decisions -
| | | | | | | | | | | |
Precise Answer ✔✔c. It shows leadership's support for the business
| | | | | | | | | |
continuity planning process
| | |
3. What is the objective of tracking program progress?
| | | | | | | |
a. To report to leadership on the status of the business continuity program
| | | | | | | | | | | |
on a regular basis
| | | |
,b. To conduct meetings to ensure that all members of the entity share
| | | | | | | | | | | |
responsibility in the project plan
| | | | |
c. To involve all internal personnel in developing and adjusting scope
| | | | | | | | | |
d. To validate that the planning team is sticking to the project plan - Precise
| | | | | | | | | | | | | |
Answer ✔✔a. To report to leadership on the status of the business
| | | | | | | | | | | |
continuity program on a regular basis
| | | | | |
4. What should be the initial scope of the business continuity program?
| | | | | | | | | | |
a. Entire entity
| |
b. IT / information systems
| | | |
c. Financial department
| |
d. Critical business units - Precise Answer ✔✔a. Entire entity
| | | | | | | | |
5. What needs to occur first in establishing a business continuity program?
| | | | | | | | | | |
a. Develop a detailed project plan
| | | | |
b. Identify project objectives and risks
| | | | |
c. Gain leadership commitment to program
| | | | |
d. Establish framework of project - Precise Answer ✔✔c. Gain leadership
| | | | | | | | | |
commitment to program
| | |
6. Shifting production from one manufacturing site to another is an example
| | | | | | | | | | |
of:
|
a. Using excess inventory
| | |
b. Utilizing excess capacity
| | |
,c. Reducing production output
| | |
d. Prioritizing customer allocations - Precise Answer ✔✔b. Utilizing
| | | | | | | |
excess capacity
| |
7. Supply chain interruptions may prevent an entity's ability to do what?
| | | | | | | | | | |
a. Keep employees safe
| | |
b. Deliver goods and services to customers
| | | | | |
c. Do walk-through testing
| | |
d. Create emergency response plans - Precise Answer ✔✔b. Deliver goods
| | | | | | | | | |
and services to customers
| | | |
8. Which of the following would be considered an external risk factor?
| | | | | | | | | | |
a. Supply chain for goods and services
| | | | | |
b. Disgruntled employees
| |
c. Employee drug screening
| | |
d. Clean desk policy procedures - Precise Answer ✔✔a. Supply chain for
| | | | | | | | | | |
goods and services
| | |
9. Which of the following would be considered a control?
| | | | | | | | |
a. Loss of access to facilities
| | | | |
b. A tornado
| |
c. Lack of fire suppression systems
| | | | |
d. UPS/generators - Precise Answer ✔✔d. UPS/generators
| | | | | |
, 10. Determining cyber threats to the entity is part of the:
| | | | | | | | | |
a. Business continuity plan
| | |
b. Disaster recovery plan
| | |
c. Business impact analysis
| | |
d. Risk assessment - Precise Answer ✔✔d. Risk assessment
| | | | | | | |
11. Which of the following is an objective of a business impact analysis?
| | | | | | | | | | | |
a. To calculate the probability of disruptions to the entity
| | | | | | | | |
b. To evaluate the effectiveness of existing controls and safeguards
| | | | | | | | |
c. To identify and prioritize the recovery of an entity's functions and
| | | | | | | | | | |
processes
|
d. To develop preparations and procedures for responding to a disaster -
| | | | | | | | | | |
Precise Answer ✔✔c. To identify and prioritize the recovery of an entity's
| | | | | | | | | | | |
functions and processes
| | |
12. Which of the following is an example of a qualitative impact?
| | | | | | | | | | |
a. Loss of sales
| | |
b. Loss of reputation
| | |
c. Loss of revenue due to penalties
| | | | | |
d. Extra expense - Precise Answer ✔✔b. Loss of reputation
| | | | | | | | |
13. Which of the following is an example of a quantitative impact?
| | | | | | | | | | |
a. Lower level of customer service
| | | | |
b. A disruption of quality assurance
| | | | |
QUESTIONS WITH ACCURATE
SOLUTIONS
1. Which of the following statements is true?
| | | | | | |
a. Conforming to a standard is mandatory
| | | | | |
b. Complying with a regulation is voluntary
| | | | | |
c. Auditors do not assess business continuity programs against regulations
| | | | | | | | |
d. Auditors assess business continuity programs against standards and
| | | | | | | |
regulations - Precise Answer ✔✔d. Auditors assess business continuity
| | | | | | | | |
programs against standards and regulations
| | | | |
2. What is the value of a business continuity policy statement?
| | | | | | | | | |
a. It forces middle management to comply with senior directives
| | | | | | | | |
b. It shows employees how to do their part in the planning process
| | | | | | | | | | | |
c. It shows leadership's support for the business continuity planning process
| | | | | | | | | |
d. It provides leadership a direction in which to make future decisions -
| | | | | | | | | | | |
Precise Answer ✔✔c. It shows leadership's support for the business
| | | | | | | | | |
continuity planning process
| | |
3. What is the objective of tracking program progress?
| | | | | | | |
a. To report to leadership on the status of the business continuity program
| | | | | | | | | | | |
on a regular basis
| | | |
,b. To conduct meetings to ensure that all members of the entity share
| | | | | | | | | | | |
responsibility in the project plan
| | | | |
c. To involve all internal personnel in developing and adjusting scope
| | | | | | | | | |
d. To validate that the planning team is sticking to the project plan - Precise
| | | | | | | | | | | | | |
Answer ✔✔a. To report to leadership on the status of the business
| | | | | | | | | | | |
continuity program on a regular basis
| | | | | |
4. What should be the initial scope of the business continuity program?
| | | | | | | | | | |
a. Entire entity
| |
b. IT / information systems
| | | |
c. Financial department
| |
d. Critical business units - Precise Answer ✔✔a. Entire entity
| | | | | | | | |
5. What needs to occur first in establishing a business continuity program?
| | | | | | | | | | |
a. Develop a detailed project plan
| | | | |
b. Identify project objectives and risks
| | | | |
c. Gain leadership commitment to program
| | | | |
d. Establish framework of project - Precise Answer ✔✔c. Gain leadership
| | | | | | | | | |
commitment to program
| | |
6. Shifting production from one manufacturing site to another is an example
| | | | | | | | | | |
of:
|
a. Using excess inventory
| | |
b. Utilizing excess capacity
| | |
,c. Reducing production output
| | |
d. Prioritizing customer allocations - Precise Answer ✔✔b. Utilizing
| | | | | | | |
excess capacity
| |
7. Supply chain interruptions may prevent an entity's ability to do what?
| | | | | | | | | | |
a. Keep employees safe
| | |
b. Deliver goods and services to customers
| | | | | |
c. Do walk-through testing
| | |
d. Create emergency response plans - Precise Answer ✔✔b. Deliver goods
| | | | | | | | | |
and services to customers
| | | |
8. Which of the following would be considered an external risk factor?
| | | | | | | | | | |
a. Supply chain for goods and services
| | | | | |
b. Disgruntled employees
| |
c. Employee drug screening
| | |
d. Clean desk policy procedures - Precise Answer ✔✔a. Supply chain for
| | | | | | | | | | |
goods and services
| | |
9. Which of the following would be considered a control?
| | | | | | | | |
a. Loss of access to facilities
| | | | |
b. A tornado
| |
c. Lack of fire suppression systems
| | | | |
d. UPS/generators - Precise Answer ✔✔d. UPS/generators
| | | | | |
, 10. Determining cyber threats to the entity is part of the:
| | | | | | | | | |
a. Business continuity plan
| | |
b. Disaster recovery plan
| | |
c. Business impact analysis
| | |
d. Risk assessment - Precise Answer ✔✔d. Risk assessment
| | | | | | | |
11. Which of the following is an objective of a business impact analysis?
| | | | | | | | | | | |
a. To calculate the probability of disruptions to the entity
| | | | | | | | |
b. To evaluate the effectiveness of existing controls and safeguards
| | | | | | | | |
c. To identify and prioritize the recovery of an entity's functions and
| | | | | | | | | | |
processes
|
d. To develop preparations and procedures for responding to a disaster -
| | | | | | | | | | |
Precise Answer ✔✔c. To identify and prioritize the recovery of an entity's
| | | | | | | | | | | |
functions and processes
| | |
12. Which of the following is an example of a qualitative impact?
| | | | | | | | | | |
a. Loss of sales
| | |
b. Loss of reputation
| | |
c. Loss of revenue due to penalties
| | | | | |
d. Extra expense - Precise Answer ✔✔b. Loss of reputation
| | | | | | | | |
13. Which of the following is an example of a quantitative impact?
| | | | | | | | | | |
a. Lower level of customer service
| | | | |
b. A disruption of quality assurance
| | | | |
