image


CBCP Dumps CBCP Braindumps

CBCP Real Questions CBCP Practice Test CBCP Actual Questions


DRI


CBCP


Certified Business Continuity Professional


https://killexams.com/pass4sure/exam-detail/CBCP


Question: 118


Which are included in the Business Continuity professional's role? Select all that apply:


  1. Act as project sponsor for the BCP project

  2. Establish an Exercise/Testing Program

  3. Establish a plan to maintain BCP

  4. Establish the business continuity audit process

  5. Communicate exercise test results


Answer: B, C, D, E


According to the Disaster Recovery Institute's Professional Practices, the following are part of the business continuity planner's role in the subject area of Business Continuity Plan Exercise, Audit and Maintenance: -Establish an Exercise/Testing Program -Establish an Exercise/Testing Program -Establish a plan to maintain BCP -Establish a plan to maintain BCP -Establish the business continuity audit process -Establish the business continuity audit process - Communicate exercise test results -Communicate exercise test results


Key Takeaway: The BCP process is iterative. Performing these functions will provide feedback that will lead to re-planning.


Question: 119


How frequently should exercises be carried out? Select all that apply:


  1. On an ad hoc basis to check readiness on the fly

  2. Whenever new risks are identified and incorporated in the plan

  3. Pre-defined frequency

  4. Weekly

  5. Never


Answer: B, C


A BCP exercise should be carried out at a predefined frequency, and whenever new risks are identified to incorporate the response benchmarks in the plan.


Key Takeaway: The primary purpose of simulation exercise is to measure the response against benchmarks. It is expected that readiness of crisis management team will be ensured through continuous iterations, and assessment of new risks and preparing appropriate response plan.


Question: 120


True or false: A table top exercise can improve emergency preparedness.


  1. True

  2. False


Answer: A


A tabletop exercise is limited simulation of a crisis scenario in a narrative format. The exercise takes on a review and discussion format as opposed to an actual simulation.


Key Takeaway: Tabletop exercises are predominantly limited walkthroughs that familiarize team members with their roles.


Question: 121

Consider an organization providing call center services to Fortune 100 companies. All the employees of the organization (excluding support staff) are involved in taking calls from customers based in 5 continents. The organization has to carry out evacuation drill. What is the most appropriate strategy to carry out the drill?


  1. Carry out the drill with support staff only

  2. Bring all employees in on Sunday for the drill

  3. The drill should be employees in their respective working shift

  4. Employees in their respective shifts must continue to work.


Answer: C


The drills should simulate live situations. The drill is best carried out with employees in their working shifts.


Key Takeaway: Appropriate planning of the exercise and involvement of all stakeholders (including customers) is necessary in crisis management. In this case, substantial planning must be done to have a live drill to avoid disruption of the call center processes. Customers want you to do this type of exercise to ensure they are protected in case of an emergency and will often work with you.


Question: 122


A health care company realizes that their standard for losing no more than two hours of data in the event of a major emergency is not in compliance with federal regulations on patient data. What should be the immediate term action for the IT management and Board members responsible for disaster management?


  1. A. Focus upgrading infrastructure and prepare a new IT plan.

  2. Communicate to stakeholders that the RTO ( recovery time objective recovery time objective ) is compromised. ) is compromised.

  3. Modify the RPO ( recovery point objective recovery point objective ) and work with stakeholders to assess/communicate the impact. ) and work with stakeholders to assess/communicate the impact.

E. Do nothing.

D. All of the above.


Answer: C


The case presented describes a situation where the organization's recovery point objective is not compliant with a federal regulation. An infrastructure upgrade (Option A) is a medium/long term mitigation plan, but it does not immediately address the non-compliance issue. RTO (Option B) is not impacted as explained in the case. RTO (Option B) is not impacted as explained in the case.


Key Takeaway: The case represents a situation where planning exercise has missed a critical continuity requirement. In such cases, it is important that all stakeholders informed. Also, the plan must also be modified to capture the change.


Question: 123


True or false: The business continuity planner should define the Change Control Process for BCP.


  1. True

  2. False


Answer: A


According to the Disaster Recovery Institute's Professional Practices, the business continuity planner should define the Change Control Process for BCP.


Key Takeaway: While this may seem like a daunting task, abiding by an organization's established practices for change control in projects is often the best option.


Question: 124


All of the following are common results of testing and maintaining the business continuity plan except:


  1. Additional funding is added

  2. BCP Project Charter is changed

  3. BCP project plan is changed

  4. Communications management plan is changed

  5. All of the above are true


Answer: B


Key Takeaway: The project charter provides a vision statement for an undertaking and justifies its existence. If you had to change the project charter every time you did a risk assessment, you'd be one frustrated person.


Question: 125


Which of the following are possible stakeholders in business continuity planning choices? Select all that apply.


  1. Police

  2. Local pro sports team

  3. Suppliers

  4. Emergency responders

  5. None of the above


Answer: A, C, D


Groups and people that may be impacted or need to reacte to a disruption of normal activities are stakeholders.


Key Takeaway: All stakeholders must be carefully identified for business continuity planning. Their involvement in the planning is extremely important for success of crisis management.


image

6$03/( 48(67,216


7KHVH TXHVWLRQV DUH IRU GHPR SXUSRVH RQO\ )XOO YHUVLRQ LV XS WR GDWH DQG FRQWDLQV DFWXDO TXHVWLRQV DQG DQVZHUV


.LOOH[DPV FRP LV DQ RQOLQH SODWIRUP WKDW RIIHUV D ZLGH UDQJH RI VHUYLFHV UHODWHG WR FHUWLILFDWLRQ H[DP SUHSDUDWLRQ 7KH SODWIRUP SURYLGHV DFWXDO TXHVWLRQV H[DP GXPSV DQG SUDFWLFH WHVWV WR KHOS LQGLYLGXDOV SUHSDUH IRU YDULRXV FHUWLILFDWLRQ H[DPV ZLWK FRQILGHQFH +HUH DUH VRPH NH\ IHDWXUHV DQG VHUYLFHV RIIHUHG E\ .LOOH[DPV FRP


$FWXDO ([DP 4XHVWLRQV .LOOH[DPV FRP SURYLGHV DFWXDO H[DP TXHVWLRQV WKDW DUH H[SHULHQFHG LQ WHVW FHQWHUV 7KHVH TXHVWLRQV DUH XSGDWHG UHJXODUO\ WR HQVXUH WKH\ DUH XS WR GDWH DQG UHOHYDQW WR WKH ODWHVW H[DP V\OODEXV %\ VWXG\LQJ WKHVH DFWXDO TXHVWLRQV FDQGLGDWHV FDQ IDPLOLDUL]H WKHPVHOYHV ZLWK WKH FRQWHQW DQG IRUPDW RI WKH UHDO H[DP


([DP 'XPSV .LOOH[DPV FRP RIIHUV H[DP GXPSV LQ 3') IRUPDW 7KHVH GXPSV FRQWDLQ D FRPSUHKHQVLYH FROOHFWLRQ RI TXHVWLRQV DQG DQVZHUV WKDW FRYHU WKH H[DP WRSLFV %\ XVLQJ WKHVH GXPSV FDQGLGDWHV FDQ HQKDQFH WKHLU NQRZOHGJH DQG LPSURYH WKHLU FKDQFHV RI VXFFHVV LQ WKH FHUWLILFDWLRQ H[DP


3UDFWLFH 7HVWV .LOOH[DPV FRP SURYLGHV SUDFWLFH WHVWV WKURXJK WKHLU GHVNWRS 9&( H[DP VLPXODWRU DQG RQOLQH WHVW HQJLQH 7KHVH SUDFWLFH WHVWV VLPXODWH WKH UHDO H[DP HQYLURQPHQW DQG KHOS FDQGLGDWHV DVVHVV WKHLU UHDGLQHVV IRU WKH DFWXDO H[DP 7KH SUDFWLFH WHVWV FRYHU D ZLGH UDQJH RI TXHVWLRQV DQG HQDEOH FDQGLGDWHV WR LGHQWLI\ WKHLU VWUHQJWKV DQG ZHDNQHVVHV


*XDUDQWHHG 6XFFHVV .LOOH[DPV FRP RIIHUV D VXFFHVV JXDUDQWHH ZLWK WKHLU H[DP GXPSV 7KH\ FODLP WKDW E\ XVLQJ WKHLU PDWHULDOV FDQGLGDWHV ZLOO SDVV WKHLU H[DPV RQ WKH ILUVW DWWHPSW RU WKH\ ZLOO UHIXQG WKH SXUFKDVH SULFH 7KLV JXDUDQWHH SURYLGHV DVVXUDQFH DQG FRQILGHQFH WR LQGLYLGXDOV SUHSDULQJ IRU FHUWLILFDWLRQ H[DPV


8SGDWHG &RQWHQW .LOOH[DPV FRP UHJXODUO\ XSGDWHV LWV TXHVWLRQ EDQN DQG H[DP GXPSV WR HQVXUH WKDW WKH\ DUH FXUUHQW DQG UHIOHFW WKH ODWHVW FKDQJHV LQ WKH H[DP V\OODEXV 7KLV KHOSV FDQGLGDWHV VWD\ XS WR GDWH ZLWK WKH H[DP FRQWHQW DQG LQFUHDVHV WKHLU FKDQFHV RI VXFFHVV


7HFKQLFDO 6XSSRUW .LOOH[DPV FRP SURYLGHV IUHH [ WHFKQLFDO VXSSRUW WR DVVLVW FDQGLGDWHV ZLWK DQ\ TXHULHV RU LVVXHV WKH\ PD\ HQFRXQWHU ZKLOH XVLQJ WKHLU VHUYLFHV 7KHLU FHUWLILHG H[SHUWV DUH DYDLODEOH WR SURYLGH JXLGDQFH DQG KHOS FDQGLGDWHV WKURXJKRXW WKHLU H[DP SUHSDUDWLRQ MRXUQH\


'PS .PSF FYBNT WJTJU IUUQT LJMMFYBNT DPN WFOEPST FYBN MJTU

.LOO \RXU H[DP DW )LUVW $WWHPSW *XDUDQWHHG