Multiple Chose Question

1. Which is not a traditional phase in preparing a business continuity plan (BCP)?

a. Project Management and Initiation

b. Business Impact Analysis

c. Quantitative Risk Analysis

d. Testing, Maintenance, Awareness, and Training

2. In business continuity planning (BCP), where did the most of operational requirements originated from?

a. The system architecture

b. Analysis of recovery strategy

c. Analysis of business impacts

d. Disaster recovery planning

3. BCP must address which of the following disasters?

I Hazardous Material Spills

II Earthquakes

a. neither I nor II

b. II only

c. both I and II

d. I only

4. n business continuity planning (BCP), the recovery window (i.e., maximum tolerable downtime (MTD)) is determined in which phase?

a. Business Impact Analysis Phase

b. Testing Phase

c. Recovery Strategy Phase

d. Project Initiation Phase

5. A business continuity plan (BCP) should have a structure that includes:

a. A detailed section on incident and risk assessment covering all the organization's business activities.

b. A brief section on incident and risk assessment covering all the organization's business activities

c. A brief section on incident and risk assessment covering all the organization's key business activities.

d. A detailed section on incident and risk assessment covering all the organization's key business activities.

6. Business continuity planning (BCP) projects should be approved at:

a. the board level

b. the front line level

c. the team level

d. the operational level

7. A business continuity plan (BCP) should cover all essential and critical business activities.

a. None of the choices.

b. True only when IS audit is not involved

c. True

d. False

8. A business continuity plan (BCP) should be:

a. Periodically tested in a simulated environment

b. Tested daily in a simulated environment.

c. Activated every day.

d. Tested bi-weekly in a simulated environment