CERTIFICATION EXAM PRACTICE QUESTIONS AND
ANSWERS: THE MOST RECENT AND COMPREHENSIVE
VERSION WITH VERIFIED ANSWERS; GUARANTEED PASS
WITH INSTANT PDF DOWNLOAD.
Examination Overview:
This 150-question comprehensive examination assesses mastery of the full spectrum of knowledge
domains required of a Certified Business Continuity Planner (CBCP). The test reflects professional
standards established by organizations such as DRI International and incorporates global best practices
aligned with frameworks including ISO standards (e.g., ISO 22301).
Domains Covered:
Business Continuity Management (BCM) lifecycle and governance
Risk assessment and threat analysis
Business Impact Analysis (BIA)
Recovery strategies and solutions
Plan development and documentation
Incident response and crisis management
Emergency preparedness and life safety
IT disaster recovery integration
Supply chain resilience
Training, awareness, and exercising
Maintenance and continuous improvement
Legal, regulatory, and ethical considerations
Auditing, metrics, and program maturity
Leadership, communication, and stakeholder management
Real-world scenario-based decision making
1. The primary objective of a Business Continuity Management (BCM)
program is to:
A. Eliminate all organizational risks
B. Ensure regulatory compliance only
C. Maintain delivery of critical products and services during disruption
D. Protect physical assets exclusively
Rationale: BCM ensures continuity of critical operations during and after
disruptions rather than eliminating all risk.
, 2. A Business Impact Analysis (BIA) primarily identifies:
A. Threat probabilities
B. Insurance coverage gaps
C. Critical functions and impact of disruption over time
D. Employee satisfaction levels
Rationale: The BIA evaluates operational and financial impacts over time to
determine priorities.
3. Maximum Tolerable Downtime (MTD) refers to:
A. System backup duration
B. Maximum time a process can be inoperable before unacceptable
damage occurs
C. Vendor response time
D. Mean time to repair
Rationale: MTD defines the outer limit of survivability for a function.
4. Recovery Time Objective (RTO) must always be:
A. Equal to MTD
B. Longer than MTD
C. Shorter than or equal to MTD
D. Determined after recovery begins
Rationale: RTO must ensure recovery before the MTD threshold is exceeded.
5. Which best describes Recovery Point Objective (RPO)?
A. Time to restore infrastructure
B. Acceptable downtime duration
, C. Maximum acceptable data loss measured in time
D. Mean time between failures
Rationale: RPO determines acceptable data loss.
6. Senior management’s most critical role in BCM is to:
A. Conduct BIAs
B. Approve vendor contracts
C. Provide policy, oversight, and resources
D. Lead all exercises
Rationale: Executive sponsorship ensures authority and resources.
7. Risk assessment differs from BIA because it:
A. Focuses only on IT
B. Identifies threats and vulnerabilities
C. Determines financial impacts
D. Establishes RTOs
Rationale: Risk assessments analyze threats and vulnerabilities; BIA measures
impact.
8. In a pandemic scenario, the most critical mitigation strategy is:
A. Increasing insurance
B. Expanding data storage
C. Implementing workforce continuity strategies
D. Relocating data centers
Rationale: Workforce continuity is central in health-related disruptions.
, 9. A hot site provides:
A. Office furniture only
B. Power and HVAC only
C. Fully operational IT infrastructure ready for immediate use
D. Cold storage backup
Rationale: Hot sites enable rapid system restoration.
10.Ethical responsibility of a CBCP includes:
A. Withholding vulnerabilities from management
B. Favoring certain departments
C. Providing objective risk reporting
D. Reducing compliance scope
Rationale: Ethical practice demands transparent and objective reporting.
11.A tabletop exercise primarily tests:
A. Equipment durability
B. Decision-making and communication processes
C. Backup hardware
D. Insurance terms
Rationale: Tabletop exercises evaluate leadership response and coordination.
12.Which metric measures BCM program effectiveness?
A. Annual revenue
B. Exercise performance and corrective action closure rates
C. Market share
D. Employee turnover