46.
Which option is not a responsibility of the person designated to manage the continuity
planning process?
- A.Providing information and direction to senior management staff
- B.Providing stress mitigation programs to employees after an asset loss event
- C.Analyzing and identifying all critical business functions
- D.Coordinating and planning integration among business units
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
Stress reduction programs and other employee benefi t programs is usually the responsibility of the human resources department. Options A, C, and D describe responsibilities of the person designated to manage the continuity planning process. |
47.
Which disaster recovery/emergency management plan testing type is considered the most
cost-effective and efficient way to identify areas of overlap in the plan before conducting a
more demanding training exercise?
- A.Full failover test
- B.Structured walk-through test
- C.Tabletop exercise
- D.Bullet point test
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
This plan is both cost effective and effi cient. Option A is a very expensive test. Although they are types of tests, options C and D may be used to update information only. |
48.
Which of the following options best describes a cold site?
- A.An alternate processing facility with established electrical wiring and HVAC but no data processing hardware
- B.An alternate processing facility with most data processing hardware and software installed, which can be operational within a matter of hours to a few days
- C.An alternate processing facility that has all hardware and software installed and is mirrored with the original site and can be operational within a very short period of him him him him time
- D.A mobile trailer with portable generators and air-conditioning
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
A cold site does not have hardware. Options B, C, and D describe warm and hot sites. |
49.
Which of the following statements is an incorrect description of a control?
- A.Detective controls monitor for attacks and instigate preventative or corrective controls.
- B.Controls reduce the possibility that vulnerabilities will be attacked.
- C.The effect of an attack is reduced through the use of controls
- D.Restorative controls reduce the likelihood of a deliberate attack.
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
Corrective controls stop an activity once it has begun. Options A, B, and C describe types of controls. |
50.
Which of the five disaster recovery testing types creates the most risk for the enterprise?
- A.Simulation
- B.Parallel
- C.Structured walk-through
- D.Full interruption
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
A full irruption test provides the most risk for the enterprise. Options A, B, and C are other types of test scenarios |