CAP Business Continuity & Disaster Recovery Planning Flashcards
6 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CAP Business Continuity & Disaster Recovery Planning flashcards as text
A Business Impact Analysis (BIA) is a critical input to contingency planning. What is its primary output?
Answer: Identification of mission-critical functions, their recovery priorities, and maximum tolerable downtime
The BIA identifies which business functions are most critical, establishes recovery priorities, quantifies the impact of disruptions, and determines MTD, RTO, and RPO for each function.
Maximum Tolerable Downtime (MTD) is the metric that defines which boundary in continuity planning?
Answer: The absolute longest period a mission-essential function can be disrupted before causing catastrophic impact
MTD (also called Maximum Tolerable Period of Disruption) represents the threshold beyond which operational disruption would result in unacceptable mission, business, or legal consequences.
Which contingency plan test type involves the least disruption to operations and tests only the plan documentation and personnel knowledge?
Answer: Tabletop exercise
A tabletop exercise is a discussion-based test where personnel walk through contingency plan scenarios without activating systems, making it the least disruptive form of contingency plan testing.
Under FISMA, which federal publication serves as the primary guidance for federal information system contingency planning?
Answer: NIST SP 800-34
NIST SP 800-34, Contingency Planning Guide for Federal Information Systems, is the authoritative guidance for developing, testing, and maintaining federal IT contingency plans.
When a federal agency activates its contingency plan and transitions operations to an alternate processing site, which activity should occur first?
Answer: Activating the notification and escalation procedures per the contingency plan
Contingency plan activation begins with executing the notification and escalation procedures to alert key personnel, leadership, and stakeholders before beginning system recovery activities.
What is the purpose of a 'warm site' in disaster recovery planning compared to a cold site?
Answer: A warm site has pre-installed hardware and software but requires data restoration, unlike a cold site which has only space and power
A warm site has necessary hardware and software infrastructure pre-configured, reducing activation time compared to a cold site, but still requires restoring data from backups before operations resume.