CISSP - Business Continuity

What action should take place to restore a system and its data files after a system failure? A. Restore from storage media backup. B. Perform a parallel test. C. Implement recovery procedures. D. Perform a walk-through test. - ANSWER_C. In this and similar situations, recovery procedures should be followed, which most likely include recovering data from the backup media. Recovery procedures could include proper steps for rebuilding a system from the beginning, applying the necessary patches and configurations, and ensuring that what needs to take place to ensure productivity is not affected. Some type of redundant system may need to be put into place. What is one of the first steps in developing a business continuity plan? A. Identify a backup solution. B. Perform a simulation test. C. Perform a business impact analysis. D. Develop a business resumption plan. - ANSWER_C. A business impact analysis includes identifying critical systems and functions of a company and interviewing representatives from each department. Once management's support is solidified, a business impact analysis needs to be performed to identify the threats the company faces and the potential costs of these threats. How often should a business continuity plan be tested? A. At least every ten years B. Only when the infrastructure or environment changes C. At least every two years D. Whenever there are significant changes in the organization and annually - ANSWER_D. The plans should be tested if there have been substantial changes to the company or the environment. They should also be tested at least once a year. During a recovery procedure test, one important step is to maintain records of important events that happen during the test. What other step is just as important? A. Schedule another test to address issues that were identified during that procedure. B. Make sure someone is prepared to talk to the media with the appropriate responses. C. Report the events to management. D. Identify essential business functions. - ANSWER_C. When recovery procedures are carried out, the outcome of those procedures should be reported to the individuals who are responsible for this type of activity, which is usually some level of