Practice Test Geeks(CCISO) EC-Council Certified CISO Practice Test
← All CCISO Flashcard Decks

Business Continuity Flashcards

7 cards from real CCISO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Business Continuity flashcards as text

  1. Which metric defines the maximum amount of data loss an organization can tolerate, expressed in time?

    Answer: Recovery Point Objective (RPO)

    RPO defines the maximum acceptable age of files that must be recovered from backup storage to resume normal operations after a disaster.

  2. A CISO is reviewing a vendor's BCP. Which clause should be contractually required to ensure the vendor's recovery capabilities align with the organization's needs?

    Answer: Service Level Agreement (SLA) with defined RTOs

    SLAs with defined RTOs contractually bind vendors to meet the organization's recovery time requirements and provide recourse if they fail.

  3. During BCP development, which analysis identifies the minimum resources required to resume critical business functions?

    Answer: Business Impact Analysis (BIA)

    A BIA identifies critical business functions, their dependencies, and the minimum resources necessary to resume operations within acceptable timeframes.

  4. An organization uses a hot site for disaster recovery. What distinguishes a hot site from a warm site?

    Answer: A hot site has fully operational systems with real-time data replication

    A hot site is a fully equipped and operational duplicate facility with real-time or near-real-time data replication, enabling near-immediate failover.

  5. Which BCP component ensures employees know their roles and responsibilities during a disruption?

    Answer: Awareness and Training Program

    Awareness and training programs ensure all personnel understand their BCP roles, enabling coordinated and effective response during an actual disruption.

  6. A full-interruption BCP test is most valuable because it:

    Answer: Validates the plan under real-world conditions with actual failover

    A full-interruption test activates the BCP completely, including actual failover to the alternate site, providing the most realistic validation of the plan.

  7. Which of the following best describes the purpose of a call tree in a BCP?

    Answer: To establish a structured notification chain to alert key personnel

    A call tree is a structured, hierarchical communication tool that ensures the right people are notified quickly and systematically during an incident.