BCLE 2000 PRACTICE EXAM LATEST UPDATES

BCLE 2000 PRACTICE EXAM Which of the following statements is true? a. Conforming to a standard is mandatory b. Complying with a regulation is voluntary c. Auditors do not assess business continuity programs against regulations d. Auditors assess business continuity programs against standards and regulations - D What is the value of a business continuity policy statement? a. It forces middle management to comply with senior directives b. It shows employees how to do their part in the planning process c. It shows leadership's support for the business continuity planning process d. It provides leadership a direction in which to make future decisions - C What is the objective of tracking program progress? a. To report to leadership on the status of the business continuity program on a regular basis b. To conduct meetings to ensure that all members of the entity share responsibility in the project plan c. To involve all internal personnel in developing and adjusting scope d. To validate that the planning team is sticking to the project plan - A What should be the initial scope of the business continuity program? a. Entire entity b. IT / information systems c. Financial department d. Critical business units - A What needs to occur first in establishing a business continuity program? a. Develop a detailed project plan b. Identify project objectives and risks c. Gain leadership commitment to program d. Establish framework of project - C Shifting production from one manufacturing site to another is an example of: a. Using excess inventory b. Utilizing excess capacity c. Reducing production output d. Prioritizing customer allocations - B Supply chain interruptions may prevent an entity's ability to do what? a. Keep employees safe b. Deliver goods and services to customers c. Do walk-through testing d. Create emergency response plans - B Which of the following would be considered an external risk factor? a. Supply chain for goods and services b. Disgruntled employees c. Employee drug screening d. Clean desk policy procedures - A Which of the following would be considered a control? a. Loss of access to facilities b. A tornado c. Lack of fire suppression systems d. UPS/generators - D Determining cyber threats to the entity is part of the: a. Business continuity plan b. Disaster recovery plan c. Business impact analysis d. Risk assessment - D Which of the following is an objective of a business impact analysis? a. To calculate the probability of disruptions to the entity b. To evaluate the effectiveness of existing controls and safeguards c. To identify and prioritize the recovery of an entity's functions and processes d. To develop preparations and procedures for responding to a disaster - C Which of the following is an example of a qualitative impact? a. Loss of sales b. Loss of reputation c. Loss of revenue due to penalties d. Extra expense - B Which of the following is an example of a quantitative impact? a. Lower level of customer service b. A disruption of quality assurance c. Loss of sales d. Lower employee morale - C Which of the following is NOT a result of conducting a business impact analysis? a. Identifies all essential entity functions and operations and their critical dependencies b. Determines when the exposures and impacts begin and how they escalate over time c. Identifies the technology and workspace needs as well as potential unbudgeted expenses d. Identifies threats from sabotage and/or terrorism and how to reduce those threats using cost-effective controls - D Data gaps occur: a. When the system data is current b. During a data restoration, when the system data has been fully backed up c. In a fully mirrored environment d. When the data backup is not identical to the system data at the time of a system disruption incident - D What is the primary purpose of conducting the risk assessment and business impact analysis? a. Establish the organizational structure b. Provide data to be used in determining strategies c. Decrease the chances of problems occurring during an incident d. Ensure employee safety - B Which of the following is an objective of developing business continuity strategies? a. Reduce deficiencies as identified during the risk assessment and business impact analysis processes b. Develop business continuity and disaster recovery plans meeting the requirements of the risk assessment and business impact analysis c. Develop scenarios for business continuity exercises and tests d. Verify critical recovery resources are implemented and functioning properly - A Which of the following would be considered a technology recovery strategy? a. Hot site b. Manual workaround procedures c. Workspace recovery area d. Supplier service level agreements - A