CBCI Practice Exam Questions and Answers

A.  

The organization's approach to risk assessment

B.  

The organization's Business Continuity culture

C.  

The role of the Business Continuity professional

D.  

The use of validation

A.  

Ability to identify commercial opportunities in adverse situations

B.  

A detailed understanding of each requirement set out in Business Continuity plans

C.  

Skill in coordinating resources, operations and suppliers

D.  

Decisiveness and the ability to make decisions quickly

A.  

A new Business Continuity professional is appointed and they provide a fresh focus on the approach to be taken

B.  

An exercise activity reveals that changes to operational procedures are needed

C.  

There is a change to the internal or external operating context

D.  

Personnel are not embracing Business Continuity and a new approach to engage them is required

A.  

May be supported by a separate crisis communications plan

B.  

Should identify viable options to coordinate efforts of the operational teams

C.  

Should contain procedures for responding to emergencies, including threats to life, or the environment

D.  

May contain procedures for coordinating the transportation of personnel to alternate facilities

A.  

Personnel, including senior managers, should be instructed to consider the exercise as a priority and ignore any risks to business as usual that may arise during the exercise

B.  

Pre-existing business as usual commitments should be treated as a secondary consideration to ensure that these commitments do not undermine the exercise activity

C.  

The disruption caused by the exercise and any impact should be planned in advance, monitored and controlled during the exercise and minimised

D.  

Any impacts of the exercise on business as usual should be written off in advance as an acceptable cost of carrying out the exercise

A.  

A Business Continuity programme that is tailored specifically for the organization, taking into account its organizational culture

B.  

A reduction in the need to update and review the BCMS due to the commitment of personnel in the development stage

C.  

Increased sales of products and services due to public confidence in the published information about the organization’s resilience capability

D.  

Validation of plans is no longer needed due to the high level of commitment from relevant personnel to their effective implementation

A.  

Review and revise the specifications for each solution developed in the design phase prior to launching them

B.  

Work with the teams who will utilize the solutions to develop any new systems or tools required to enable implementation

C.  

Allocate implementation to the relevant teams and instruct them to manage the implementation as they see fit and to their own timelines

D.  

Empower the implementation team to make changes to specifications without referring back to top management

A.  

All data users and activities have the same requirements; so only limited consultation is required to determine the RPO

B.  

The RPO should comply with data protection requirements

C.  

The RPO is the point to which information must be restored to enable all priority activities to operate on resumption

D.  

The RPO establishes the amount of time that IT services can be disrupted before the organization is impacted

A.  

They should contain detailed step-by-step instructions on what to do for every eventuality that could occur

B.  

They may include scenario-specific plans that are designed to address a particular threat

C.  

They should be validated before being deemed operational

D.  

They should be kept up to date

A.  

Only senior level exercise participants should provide opinions during the debrief

B.  

One-on-one interviews with all exercise participants should be conducted within one month following the exercise

C.  

A hot debrief should be conducted within one month after the conclusion of an exercise

D.  

Surveys are especially effective if an exercise and its participants are spread out over multiple locations