Practice Test Geeks(CAP) Certified Authorization Professional Practice Test
← All CAP Flashcard Decks

CAP Business Continuity & Disaster Recovery Planning Flashcards

7 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 CAP Business Continuity & Disaster Recovery Planning flashcards as text

  1. During a BCP exercise, an organization discovers that its Recovery Time Objective (RTO) for a critical system is 4 hours, but actual recovery takes 7 hours. What is the BEST corrective action?

    Answer: Implement additional resources or automation to close the RTO gap

    When actual recovery time exceeds the RTO, organizations should invest in resources, automation, or process improvements to close the gap and meet business requirements.

  2. Which BCP testing method provides the MOST realistic validation of recovery procedures without disrupting normal operations?

    Answer: Parallel test

    A parallel test activates the alternate site and processes while the primary site continues operating, validating recovery capability without risking actual disruption.

  3. An organization's BIA identifies that a payroll system has an RPO of zero. What backup strategy BEST satisfies this requirement?

    Answer: Synchronous real-time replication

    An RPO of zero means no data loss is tolerable, which requires synchronous real-time replication so every transaction is committed to both sites simultaneously.

  4. Under NIST SP 800-34, which document establishes the scope, roles, responsibilities, and recovery strategies for an information system?

    Answer: Contingency Plan (CP)

    NIST SP 800-34 defines the Contingency Plan (CP) as the document covering system-level scope, roles, recovery strategies, and procedures for an information system.

  5. A cloud-based organization stores backups in the same geographic region as production. Which risk does this practice FAIL to mitigate?

    Answer: Regional disasters affecting both sites simultaneously

    Storing backups in the same region means a regional disaster (hurricane, flood, power grid failure) could destroy both production and backup simultaneously.

  6. Which role is PRIMARILY responsible for declaring a disaster and activating the Disaster Recovery Plan (DRP)?

    Answer: System Owner or designated executive authority

    The System Owner or a designated executive authority (often called the Disaster Recovery Coordinator or senior management) holds primary authority to declare a disaster and activate the DRP.

  7. An organization conducts a BIA and finds that its e-commerce platform generates $500,000 per hour. The Maximum Tolerable Downtime (MTD) is 2 hours. Which statement is CORRECT?

    Answer: The RTO must be less than or equal to 2 hours

    The RTO must be set at or below the MTD (2 hours) because exceeding the MTD causes unacceptable business impact; the RTO is derived from the MTD.