Business Continuity Planning: Understanding Objectives, Strategies, and Exercises, Exams of Nursing

Download Business Continuity Planning: Understanding Objectives, Strategies, and Exercises and more Exams Nursing in PDF only on Docsity! BCLE 2000 PRACTICE EXAM | Questions with 100% Correct Answers | Verified | Latest Update | 23 Pages.. 1. Which of the following statements is true? a. Conforming to a standard is mandatory b. Complying with a regulation is voluntary c. Auditors do not assess business continuity programs against regulations d. Auditors assess business continuity programs against standards and regulations - ✔✔️D️ 2. What is the value of a business continuity policy statement? a. It forces middle management to comply with senior directives b. It shows employees how to do their part in the planning process c. It shows leadership's support for the business continuity planning process d. It provides leadership a direction in which to make future decisions - ✔✔️C️ 3. What is the objective of tracking program progress? a. To report to leadership on the status of the business continuity program on a regular basis b. To conduct meetings to ensure that all members of the entity share responsibility in the project plan c. To involve all internal personnel in developing and adjusting scope d. To validate that the planning team is sticking to the project plan - ✔✔️A️ 4. What should be the initial scope of the business continuity program? a. Entire entity b. IT / information systems c. Financial department d. Critical business units - ✔✔️A️ 5. What needs to occur first in establishing a business continuity program? a. Develop a detailed project plan b. Identify project objectives and risks c. Gain leadership commitment to program d. Establish framework of project - ✔✔️C️ 6. Shifting production from one manufacturing site to another is an example of: a. Using excess inventory b. Utilizing excess capacity c. Reducing production output d. Prioritizing customer allocations - ✔✔️B️ a. Identifies all essential entity functions and operations and their critical dependencies b. Determines when the exposures and impacts begin and how they escalate over time c. Identifies the technology and workspace needs as well as potential unbudgeted expenses d. Identifies threats from sabotage and/or terrorism and how to reduce those threats using cost-effective controls - ✔✔️D️ 18. Data gaps occur: a. When the system data is current b. During a data restoration, when the system data has been fully backed up c. In a fully mirrored environment d. When the data backup is not identical to the system data at the time of a system disruption incident - ✔✔️D️ 19. What is the primary purpose of conducting the risk assessment and business impact analysis? a. Establish the organizational structure b. Provide data to be used in determining strategies c. Decrease the chances of problems occurring during an incident d. Ensure employee safety - ✔✔️B️ 20. Which of the following is an objective of developing business continuity strategies? a. Reduce deficiencies as identified during the risk assessment and business impact analysis processes b. Develop business continuity and disaster recovery plans meeting the requirements of the risk assessment and business impact analysis c. Develop scenarios for business continuity exercises and tests d. Verify critical recovery resources are implemented and functioning properly - ✔✔️A️ 21. Which of the following would be considered a technology recovery strategy? a. Hot site b. Manual workaround procedures c. Workspace recovery area d. Supplier service level agreements - ✔✔️A️ 22. What is the purpose of conducting a cost/benefit analysis? a. To compare the cost of the strategy with loss that may occur during an event b. It is required for DRI certification c. Leadership requires this information d. It is a requirement for the budget - ✔✔️A️ 23. Which of the following is a viable option for manufacturing continuity? a. Commercial hot site b. Manual workaround procedures c. Shifting production to another site d. Business recovery center - ✔✔️C️ 24. Which gap would you expect to be identified in the business impact analysis? a. Actual recovery capability and recovery time objective b. Business continuity project schedule issues c. Insufficient project staffing d. Underfunded budget for business continuity - ✔✔️A️ 25. Which of the following describes contingent business interruption insurance? a. Insurance that pays for the extra expense of maintaining operations after an accident b. Insurance that provides protection for the loss of profits and continuing fixed expenses resulting from a break in commercial activities c. Insurance that reimburses lost profits and extra expenses resulting from a supply chain interruption d. Insurance in which no risk is transferred to the provider - ✔✔️C️ 26. Which of the following is an objective of Coordination with External Agencies? b. Assess risks to determine the potential impacts to the entity c. Develop cost-effective strategies that enable the entity to effectively recover from disaster incidents d. Document plans to be used during an incident that will enable the entity to continue to function - ✔✔️A️ 33. A plan that documents recovery teams, alternative ways to conduct business, communication processes and procedures is called what? a. Risk and vulnerability assessment b. Crisis communications and management plan c. Business continuity plan d. Disaster recovery plan - ✔✔️C️ 34. In which section of the business continuity plan should the disaster declaration guidelines be documented? a. Incident response b. Critical key processes c. Overview d. Disaster recovery procedures - ✔✔️A️ 35. Which components must be present in order to document the business continuity plan? a. A schedule of tests/exercises for the coming year b. An approved budget c. Audit approval of the document outline d. An approved strategy - ✔✔️D️ 36. A crisis management and communications plan provides for: a. Immediate notification at the time of an incident b. An orderly transition of authority from one person to the next person in the delegation of authority chain c. Audit approval of the document outline d. Documented procedures for providing information to interested parties throughout the duration of an event - ✔✔️D️ 37. The objective of disaster recovery plans is to: a. Restore technology b. Provide emergency aid c. Provide overall governance for business continuity d. Act as a control mechanism for incident management - ✔✔️A️ 38. Plan appendices contain: a. Plan glossary b. Travel directions c. Vendor lists d. All of the above - ✔✔️D️ 39. Which plan documents declaration procedures to initiate recovery operations at an alternate location? a. Incident management plan b. Crisis management and communication plan c. Recovery site activation plan d. Operational / recovery plan - ✔✔️C️ 40. What should be the objective of a sustained approach to training and awareness? a. Long-term behavior will change with a short and focused approach b. Job security for the trainer c. Regularly managing the awareness and training program reinforces knowledge and capability d. Change is resisted, training is not - ✔✔️C️ 41. When establishing a business continuity awareness and training program, the professional should: a. Develop custom software to use as the means of communications b. Identify, develop or acquire awareness and training tools and resources 48. Articles of incorporation, entity charter and entity accounting records, are examples of what? a. Government tax reporting requirements b. Database files that are safe-stored c. Vital records d. Information available to shareholders only - ✔✔️C️ 49. After the completion of an exercise/test, documenting which process will provide information for improving the plan? a. Contact lists b. Media activities surrounding the exercise/test c. Lessons learned d. Objectives of the exercise/test - ✔✔️C️ 50. A hot site exercise/test would be an example of: a. A strategy employed for manufacturing production exercise/test b. A notification tool exercise/test c. An emergency operations center exercise/test d. An alternate recovery site exercise/test - ✔✔️D️ 51. Which of the following plans is best used to provide information to the public through the media? a. Crisis communication plan b. Incident response plan c. Business continuity plan d. Disaster recovery plan - ✔✔️A️ 52. . Who should communicate information to the media during or after a disaster on behalf of the entity? a. A trained spokesperson b. The incident response team leader c. The business continuity professional d. The head of operations - ✔✔️A️ 53. The fire department is responsible for: a. Protecting your vital records b. Stabilizing the event and protecting lives c. Listening to leadership's commands d. Cleanup after the fire is extinguished - ✔✔️B️