CAP Business Continuity & Disaster Recovery Planning Flashcards
7 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 CAP Business Continuity & Disaster Recovery Planning flashcards as text
Which NIST publication provides the primary guidance for developing federal information system contingency plans?
Answer: NIST SP 800-34
NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, is the authoritative guidance for developing and implementing IT contingency plans.
A warm site alternative recovery facility has systems pre-configured but requires several hours to become fully operational. How does this differ from a hot site?
Answer: A hot site is fully operational with current data and can take over immediately
A hot site mirrors the production environment with up-to-date data and can assume operations with minimal delay, whereas a warm site requires additional setup time before becoming operational.
During contingency plan testing, a tabletop exercise PRIMARILY achieves which objective?
Answer: Familiarizes personnel with their roles and identifies plan gaps through discussion
Tabletop exercises are discussion-based simulations that familiarize participants with recovery procedures and identify gaps in the plan without activating actual systems.
An organization's contingency plan has not been tested in 18 months and key personnel have changed. Which risk does this MOST directly create?
Answer: Plan may not reflect current environment or personnel roles, causing recovery failures
Untested and outdated contingency plans risk failure during actual recovery because documented procedures and assigned roles may no longer match current system configurations or staff.
Which supply chain risk is MOST relevant to disaster recovery planning for hardware-dependent systems?
Answer: Long lead times for replacement hardware during a disaster
Hardware replacement lead times can extend recovery far beyond the RTO during a disaster, making supply chain availability a critical DR planning consideration.
A Continuity of Operations Plan (COOP) differs from an IT Disaster Recovery Plan (DRP) primarily in that a COOP:
Answer: Addresses continuation of essential government functions regardless of the disruption cause
A COOP addresses the continuation of an organization's essential mission functions and operations, while a DRP focuses specifically on recovering IT systems and infrastructure.
Which metric defines the point in time to which data must be recovered after a disruption, representing the maximum acceptable data loss?
Answer: Recovery Point Objective (RPO)
The Recovery Point Objective (RPO) defines the maximum age of data that must be recovered, essentially setting the threshold for acceptable data loss in time.