CAP Business Continuity & Disaster Recovery Planning Flashcards
6 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CAP Business Continuity & Disaster Recovery Planning flashcards as text
Which backup strategy provides the fastest data restoration time but requires the most storage space?
Answer: Full backup
A full backup captures all data in a single operation, making restoration fastest since only one backup set is needed, but it requires the most storage space and takes the longest to create.
An organization's contingency plan requires offsite storage of backup media. The primary security concern driving this requirement is which of the following?
Answer: Ensuring data survives a localized disaster that destroys the primary site
Offsite backup storage ensures that a single physical disaster (fire, flood, etc.) cannot simultaneously destroy both the primary system and all backup copies, preserving data recoverability.
After a major disruption, reconstitution activities in contingency plan execution refer to which phase?
Answer: The process of restoring the primary site to full operational status after operations have run at the alternate site
Reconstitution is the final phase of contingency plan execution, involving the restoration of the original system environment and transferring operations back from the alternate site to the primary site.
Which of the following best describes a 'system of records notice' (SORN) and its relationship to continuity planning for PII-handling systems?
Answer: SORNs document the existence of PII systems and inform contingency planners about privacy obligations that must be maintained even during recovery
A SORN published under the Privacy Act documents that an agency maintains a system of records on individuals, and contingency planners must ensure PII handling obligations identified in the SORN are met even during recovery operations.
A contingency plan for a FIPS 199 High-impact system should include which additional element beyond what is required for a Moderate-impact system?
Answer: More stringent RTOs, RPOs, and potentially geographically dispersed alternate processing sites with near-real-time replication
High-impact systems require more aggressive recovery objectives and robust alternate site capabilities, often including hot sites with real-time or near-real-time data replication to minimize data loss and downtime.
During contingency plan development, who is primarily responsible for identifying mission-essential functions and their recovery priorities?
Answer: The System Owner and mission/business process owners, with input from the ISSO
The System Owner and business process owners understand mission requirements and operational dependencies, making them best positioned to determine which functions are essential and set recovery priorities, with ISSO providing security guidance.