Practice Test Geeks(CAP) Certified Authorization Professional Practice Test
← All CAP Flashcard Decks

CAP Business Continuity & Disaster Recovery Planning Flashcards

6 cards from real CAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 CAP Business Continuity & Disaster Recovery Planning flashcards as text

  1. What is the primary purpose of a Contingency Plan (CP) for a federal information system as described in NIST SP 800-34?

    Answer: To provide instructions for recovering an information system after a disruption or disaster

    NIST SP 800-34 defines a Contingency Plan as procedures to restore IT operations and data following a disruption, ensuring mission-essential functions can continue or be quickly recovered.

  2. Recovery Time Objective (RTO) is best defined as which of the following?

    Answer: The maximum amount of time allowed to restore a system to operational status after a disruption

    RTO defines the maximum acceptable duration of downtime — from the point of disruption to the point when the system must be restored to operational functionality.

  3. Recovery Point Objective (RPO) determines which aspect of disaster recovery planning?

    Answer: The maximum acceptable amount of data loss measured in time

    RPO defines the maximum tolerable period of data loss, which directly drives backup frequency — if the RPO is 4 hours, backups must occur at least every 4 hours.

  4. Which type of disaster recovery site is fully equipped and operational, allowing immediate failover with minimal downtime?

    Answer: Hot site

    A hot site is a fully operational duplicate facility with live data replication, allowing organizations to failover with minimal or near-zero downtime.

  5. NIST SP 800-34 recommends that contingency plans be tested at what minimum frequency?

    Answer: Annually

    NIST SP 800-34 recommends that contingency plans be tested and exercised at least annually to verify recovery procedures remain effective and personnel are trained.

  6. What is the relationship between Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP)?

    Answer: BCP focuses on sustaining business operations broadly while DRP specifically addresses IT system recovery

    BCP addresses the continuity of all critical business functions and processes, while DRP is a subset focused specifically on restoring IT infrastructure and data systems after a disruption.