More MCQs
HOME
Categories
Management Information System
» Emerging Technology in E-Business MCQs
» Infrastructure and Operations MCQs
» Information and Database MCQs
» System Development Lifecycle & Software Development Models MCQs
» Project Management MCQs
» The Process of Auditing Information Systems MCQs
» Governance and Management of IT MCQs
» Auditing Infrastructure and Operations MCQs
» Information Security Management MCQs
Business Continuity and Disaster Recovery MCQs
An Organization requires a Business Continuity Plan (BCP) to ensure the uninterrupted availability of all key business resources required to support essential business functions. Here on MCQs.club we have prepared Multiple-Choice Questions (MCQs) that fully cover MCQs on business continuity and disaster recovery, business recovery planning, business continuity planning and disaster recovery policy/ for IT professionals, disaster recovery and business continuity plan example/plan with steps, aws bcp plan, planning processes. These notes also distinguish between disaster recovery planning and business continuity planning. Our MCQs are useful for Competitive exams, Business management exams and Professional accountancy exams.
- An Organization requires a Business Continuity Plan (BCP) to ensure the uninterrupted availability of all key business resources required to support essential business functions.
- True
- False
- Stages/steps of a Business Continuity Plan (BCP) include:
- Get started and Identify business requirements
- Determine recovery speed and Deal with gaps
- Maintain the program
- All of the above
- Business Impact Analysis (BIA) – is one of the key steps in developing the business continuity plan. This phase involves identifying the various events that could negatively affect continuity of operations and their impact on the organization.
- The above is correct
- The above is incorrect
- The critical recovery time period is that “window” of time in which business processing must be resumed before suffering significant or unrecoverable losses.
- True
- False
- IT outages planned or unplanned can unleash a procession of costs and consequences that are direct and indirect, tangible and intangible, short-term and long-term, immediate and far reaching. These costs include:
- Lost transaction revenue, Remedial labor costs, Marketing costs
- Decrease in stock value, Brand damage
- Both A&B
- None
- A typical risk ranking system functions may contain:
- Critical
- Vital
- Non-critical
- All of the above
- The selection of a recovery strategy would depend upon:
- The criticality of the business process and the applications supporting the processes
- Cost and Security
- Time required to recover
- All of the above
- Example of critical questions to cover in a reciprocal agreement include:
- How much time will be available at the host computer site?
- Are there certain times of the year, month etc. when the partner’s facilities are not available?
- Both A&B
- None
- Mobile data recovery –
- Mobile data recovery are either purchased or contracted to facilitate operational recovery.
- They can include computers, workstations, telephones, electrical power etc.
- They are what would be called a “transportable operating environment”
- All of the above
- Benefits of using a mobile data recovery service include:
- It may be the answer for a catastrophic outage in which access to a business location is no longer possible
- It can serve as a new operational center if the site is destroyed
- Mobile services can be invoked any time of the day or night, any day of the year.
- All of the above
- What are the drawbacks of mobile data recovery service?
- Where recovery occur within a few hours, mobile services are not recommended
- Huge cost for a mobile solution
- Both A&B
- None
- What is the most important thing to consider when selecting a mobile data recovery service provider?
- Mobile recovery company experience and reputation
- Customer references, Pricing and warranties
- Time frame from disaster declaration to arrival/connection of mobile services
- All of the above
- Contractual provisions for the use of third-party sites should cover:
- The vendor’s hardware and software configurations to meet company needs
- Speed or availability
- Reliability
- All of the above
- To make use of the “Off-the-shelf” approach, several strategies must be utilized including:
- Avoiding use of unusual and hard to get equipment
- Regularly updating equipment to keep current
- Maintaining software compatibility to permit operations of newer equipment.
- All of the above
- Emergency management team is responsible for coordinating the activities of all other recovery teams and handles key decision-making. This team functions as disaster overseers and is required to coordinate activities such as:
- Retrieving critical and vital data from off-site storage
- Operating from the system recovery site
- Rerouting network communications traffic
- Reconstructing databases
- All of the above
- For the planning, implementation and evaluation phase of the business continuity plan, which of the following should be agreed upon?
- The goals, requirements, product for each phase
- Alternate facilities to perform task and operations
- Critical information resources to deploy
- Peoples/Individuals responsible for completion
- Available resources to aid in deployment
- The scheduling of activities with priorities established
- All of the above
- (I) (III) and (V) only
- (I) (II) and (V) only
- None
- What information the Directory of key decision-making personnel should contain?
- Prioritized list of contacts, that is who gets called first
- Primary and emergency telephone numbers and addresses for each critical contact person
- Both A&B
- None
- The methods of providing telecommunications continuity are:
- Alternative Routing
- Diverse Routing
- Long haul network diversity
- All of the above
- Redundant Array of Inexpensive Disk (RAID) – provides performance improvements and fault-tolerant capabilities via hardware or software solutions, onto which a series of multiple disks are written to improve performance and save large files simultaneously.
- The above is correct
- The above is incorrect
- Fault-tolerant server –
- Provide for fail-safe redundancy through mirrored images of the primary server.
- It entails distributed processing of a server load
- Both A&B
- None
- Which of the following tasks the Recovery/Continuity Plan test should strive to accomplish?
- Verify the completeness and precision of the business continuity plan
- Evaluate the performance of the personnel involved in the exercise
- Appraise the training and awareness of non-business continuity team members
- All of the above
- Plans and strategies for business continuity should be reviewed and updated on a scheduled basis to reflect continuing recognition of changing requirements. This is based on:
- A strategy that is appropriate at one point-in-time may not be adequate as the needs of the organization change
- New applications may be developed or acquired
- Changes in business strategy may alter the significance of critical applications or deem additional applications as critical
- All of the above
- The responsibility for maintaining the business continuity plan often falls on the business continuity plan coordinator. Specific plan maintenance responsibilities include:
- Review of revisions and comments and updating the plan within 30 days of the review date
- Updating the notification directory of all personnel changes including phone numbers, responsibilities or status within the company
- Both A&B
- None
- Controls over the off-site library include:
- Securing physical access to library contents
- Locating the library away from the computer room
- Ensuring that a perpetual inventory of all storage media and files stored in the library is maintained
- All of the above
- Considerations for establishing file backup schedules include:
- Real-time files require special backup techniques such as duplicating logging of transactions, use of before and after images of master records etc.
- Data Base Management Systems (DBMS) require specialized backup, usually provided as an integral feature of the DBMS
- Both A&B
- None
- When reviewing the developed plan, IS auditor should verify that basic elements of a well-developed plan are evident:
- Obtain a current copy of the business continuity plan or manual
- Sample the distributed copies of the manual and verify that they are current
- Determine if all critical applications have been identified
- All of the above
- Even with a well-planned backup strategy some___________ may be required.
- Information
- Quantification
- Re-inputting
- Re-implementation
- The IS auditor evaluates the off-site storage facility by gathering following information:
- Data files
- Applications software
- Applications documentation
- Systems software, systems documentation
- Operations documentation
- (I) (III) and (v) only
- (II) (III) and (IV) only
- None
- All of the above
- Which of the following findings is of the highest concern during the audit of a business continuity plan?
- There is no insurance for the addition of assets during the year
- The business continuity plan manual is not updated on a regular basis
- Testing of the backup of data has not been done regularly
- None
—More to come soon—
