Business Continuity & Resilience Flashcards
7 cards from real SSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Business Continuity & Resilience flashcards as text
Which metric defines the maximum tolerable period that a system can be offline before causing unacceptable business impact?
Answer: Maximum Tolerable Downtime (MTD)
Maximum Tolerable Downtime (MTD) is the longest period an organization can survive without a critical function before the impact becomes unacceptable.
During a tabletop exercise, a facilitator introduces an unexpected complication mid-scenario. What is the primary purpose of this technique?
Answer: To test the team's ability to adapt plans to evolving conditions
Injecting unexpected complications tests the team's adaptive decision-making, which is more realistic than following a static script.
A company's BCP identifies a critical vendor as a single point of failure. Which resilience strategy directly addresses this risk?
Answer: Dual-sourcing or qualifying an alternate supplier
Dual-sourcing eliminates the single point of failure by ensuring a qualified backup supplier can fulfill the same function.
What is the key difference between a hot site and a warm site in disaster recovery?
Answer: Hot sites have pre-loaded data and are immediately operational; warm sites require some setup time
A hot site is fully configured and operational with current data, while a warm site has hardware but requires data restoration and configuration before use.
An organization experiences a cyberattack during an ongoing natural disaster. This scenario is best described as a:
Answer: Cascading or compound disaster
A cascading or compound disaster occurs when multiple simultaneous or sequential events interact, complicating response and recovery efforts.
Which element of a Crisis Communication Plan ensures that only authorized individuals speak on behalf of the organization during an incident?
Answer: Designated spokesperson policy
A designated spokesperson policy controls messaging and prevents contradictory or unauthorized statements from reaching stakeholders and media.
After restoring operations following a disaster, which activity formally closes out the incident response phase and transitions to normal operations?
Answer: Reconstitution declaration
A reconstitution declaration formally signals that primary systems are restored and the organization is transitioning back to normal operations.