CISSP Business Continuity 5 — Questions and Answers
Question 1: Which technique provides the HIGHEST data availability by writing data simultaneously to two separate storage systems?
- Asynchronous replication
- RAID 5 striping with parity
- Synchronous mirroring (Correct answer)
- Tape vaulting
Correct answer: Synchronous mirroring
Synchronous mirroring writes data to both primary and secondary storage in real time, ensuring zero data loss if one system fails.
Question 2: A BCP team discovers that a critical vendor has no continuity plan. What is the BEST immediate action?
- Terminate the vendor contract immediately
- Assess the risk and develop a contingency plan for vendor failure (Correct answer)
- Accept the risk since vendor operations are outside the organization's control
- Report the finding to regulators
Correct answer: Assess the risk and develop a contingency plan for vendor failure
The organization should assess the criticality of the vendor and develop an internal contingency plan or require the vendor to establish BCPs contractually.
Question 3: What is the purpose of a continuity of operations plan (COOP)?
- To restore IT systems after a cyberattack
- To ensure essential government or organizational functions continue during a disruption (Correct answer)
- To document insurance claims following a disaster
- To test vendor SLAs during simulated outages
Correct answer: To ensure essential government or organizational functions continue during a disruption
A COOP is designed to ensure that essential functions of an organization (especially government agencies) continue during and after a disaster.
Question 4: During a full interruption test, what significant risk does the organization accept?
- Personnel may not be familiar with recovery procedures
- Primary systems are taken offline, risking real business disruption if recovery fails (Correct answer)
- Costs may exceed the disaster recovery budget
- Regulatory auditors may review the test results
Correct answer: Primary systems are taken offline, risking real business disruption if recovery fails
A full interruption test shuts down actual production systems, meaning a failed recovery directly impacts real business operations.
Question 5: Which factor is MOST important when selecting a geographic location for an alternate processing site?
- Proximity to the primary site for easy personnel commute
- Location outside the same natural disaster risk zone as the primary site (Correct answer)
- Lower operating costs compared to the primary location
- Availability of high-speed fiber internet connectivity
Correct answer: Location outside the same natural disaster risk zone as the primary site
The alternate site must be far enough from the primary site that a regional disaster such as a hurricane or earthquake cannot affect both simultaneously.
Question 6: A company defines its crisis communication plan. Which group should be addressed FIRST in an external communication sequence?
- Media and press outlets
- General public via social media
- Regulators and key stakeholders as required by law or contract (Correct answer)
- Customers via marketing email
Correct answer: Regulators and key stakeholders as required by law or contract
Legal and contractual obligations typically require notifying regulators and key stakeholders before broader public communications.
Question 7: Which BCP concept ensures that no single employee's absence can halt a critical business process?
- Separation of duties
- Cross-training and succession planning (Correct answer)
- Least privilege
- Job rotation
Correct answer: Cross-training and succession planning
Cross-training ensures multiple employees can perform critical functions, and succession planning designates backups for key roles, eliminating single points of human failure.
