Exam Questions and CORRECT Answers
1. James is working with his organization's leadership to help them understand the role that
disaster
recovery plays in their cybersecurity strategy. The leaders are confused about the differences
between disaster recovery and business continuity. What is the end goal of disaster recovery
planning?
A. Preventing business interruption
B. Setting up temporary business operations
C. Restoring normal business activity
D. Minimizing the impact of a disaster - CORRECT ANSWER - C. Restoring normal
business activity
2. Kevin is attempting to determine an appropriate backup frequency for his organization's
database
server and wants to ensure that any data loss is within the organization's risk appetite. Which one
of the following security process metrics would best assist him with this task?
A. RTO
B. MTD
C. RPO
D. MTBF - CORRECT ANSWER - C. RPO
3. Brian's organization recently suffered a disaster and wants to improve their disaster recovery
program based on their experience. Which one of the following activities will best assist with
this
task?
A. Training programs
B. Awareness efforts
, C. BIA review
D. Lessons learned - CORRECT ANSWER - D. Lessons learned
4. Adam is reviewing the fault-tolerance controls used by his organization and realizes that they
currently have a single point of failure in the disks used to support a critical server. Which one of
the following controls can provide fault tolerance for these disks?
A. Load balancing
B. RAID
C. Clustering
D. HA pairs - CORRECT ANSWER - B. RAID
5. Brad is helping to design a disaster recovery strategy for his organization and is analyzing
possible storage locations for backup data. He is not certain where the organization will recover
operations in the event of a disaster and would like to choose an option that allows them the
flexibility to easily retrieve data from any DR site. Which one of the following storage locations
provides the best option for Brad?
A. Primary data center
B. Field office
C. Cloud computing
D. IT manager's home - CORRECT ANSWER - C. Cloud computing
6. Which of the following statements about business continuity planning and disaster recovery
planning are correct? (Choose all that apply.)
A. Business continuity planning is focused on keeping business functions uninterrupted when a
disaster strikes.
B. Organizations can choose whether to develop business continuity planning or disaster
recovery planning plans.
C. Business continuity planning picks up where disaster recovery planning leaves off.