I85PREP
⌘ K
ABC CP study materials
ABC CP study resources

ABC CP practice questions

One question at a time. Build your ABC CP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Business Continuity Management Knowledge (Qualifying Examination content)

Which statement best describes the primary purpose of a business impact analysis (BIA)?

  1. To document the organizational chart and reporting lines
  2. To record employee training completion rates
  3. To calculate the annual insurance premium for facilities
  4. To identify time-sensitive processes and the resources needed to support them Correct answer.

Explanation

A BIA identifies the organization's critical business functions, the impact of their disruption over time, and the dependencies and resources required to keep them running. It is the analytical foundation for recovery prioritization.

Question 2Business Continuity Management Knowledge (Qualifying Examination content)

In business continuity terminology, what does the recovery time objective (RTO) define?

  1. The interval between full backup cycles
  2. The maximum acceptable length of time a process can be unavailable Correct answer.
  3. The duration of the annual continuity exercise
  4. The point in time to which data must be restored

Explanation

The RTO is the target time within which a business process must be restored after a disruption to avoid unacceptable consequences. It is derived from impact over time, not from backup schedules.

Question 3Business Continuity Management Knowledge (Qualifying Examination content)

A company determines that its order-entry system can tolerate losing no more than 15 minutes of transactions. Which metric does this requirement express?

  1. Recovery point objective Correct answer.
  2. Maximum tolerable downtime
  3. Service level target
  4. Recovery time objective

Explanation

The recovery point objective (RPO) expresses how much data loss, measured in time, is acceptable. A 15-minute transaction-loss tolerance translates directly into an RPO of 15 minutes.

Question 4Business Continuity Management Knowledge (Qualifying Examination content)

Which of the following is the most appropriate first step when establishing a business continuity management program?

  1. Scheduling the first full-scale recovery exercise
  2. Conducting a risk assessment and business impact analysis to establish requirements Correct answer.
  3. Drafting individual departmental recovery procedures
  4. Purchasing a hot-site recovery contract for the data center

Explanation

Continuity planning must be grounded in an understanding of risks and impacts so that strategies and resources match actual requirements. Acquiring recovery capabilities or writing procedures before requirements are known risks misallocating resources.

Question 5Business Continuity Management Knowledge (Qualifying Examination content)

What distinguishes a business continuity plan (BCP) from a disaster recovery plan (DRP)?

  1. The BCP is confidential while the DRP is a public document
  2. The BCP is created by regulators while the DRP is created internally
  3. The BCP is exercised annually while the DRP is never tested
  4. The BCP addresses the full range of business functions while the DRP focuses on technology recovery Correct answer.

Explanation

The BCP covers business processes, people, facilities, and communications across the enterprise, whereas the DRP is a technology-focused subset addressing IT infrastructure and data restoration. The two are complementary layers of the same program.

Question 6Business Continuity Management Knowledge (Qualifying Examination content)

Which recovery strategy generally provides the fastest restoration of IT services but at the highest ongoing cost?

  1. A mirrored site with real-time replication Correct answer.
  2. A reciprocal agreement with another organization
  3. A warm site with periodic data synchronization
  4. A cold site with offsite tape storage

Explanation

A mirrored (hot) site maintains continuously synchronized systems and can assume operations almost immediately, which commands the greatest recurring cost. Lower-cost alternatives trade speed of recovery for economy.

Question 7Business Continuity Management Knowledge (Qualifying Examination content)

What is the primary role of a business continuity coordinator during an actual disruption?

  1. To negotiate vendor contracts for replacement equipment
  2. To independently audit the accuracy of the recovery plan
  3. To direct the response and coordinate communications among recovery teams Correct answer.
  4. To approve the organization's annual insurance renewal

Explanation

The continuity coordinator activates the plan, directs response activities, and serves as the hub for internal and external communications during an event. Auditing and procurement are separate functions performed by other roles.

Question 8Business Continuity Management Knowledge (Qualifying Examination content)

Which element is essential for a business continuity plan to remain usable over time?

  1. A scheduled maintenance process that reviews and updates the plan Correct answer.
  2. Exclusion of contact details to protect privacy
  3. A single printed copy stored in the primary office
  4. A policy that the plan is revised only after a disaster occurs

Explanation

Plans become stale as people, systems, and processes change, so a formal maintenance cycle with assigned ownership keeps content accurate. Revision triggered only by an actual disaster leaves the plan outdated when it is most needed.

Question 9Business Continuity Management Knowledge (Qualifying Examination content)

An organization identifies a manual workaround that lets staff process orders within four hours of an outage. How should this capability be classified?

  1. A preventive control that eliminates the outage risk
  2. A corrective audit finding requiring escalation
  3. A risk transfer measure that shifts loss to an insurer
  4. A continuity strategy that reduces the effective recovery time Correct answer.

Explanation

A workaround is a continuity strategy because it provides an alternate means of performing the function and shortens the achievable recovery time. It mitigates impact but does not eliminate the underlying risk or transfer financial loss.

Question 10Business Continuity Management Knowledge (Qualifying Examination content)

During a BIA, a department reports that disruption beyond 24 hours would cause regulatory breach, while financial loss becomes severe only after 72 hours. Which consideration should drive the recovery priority?

  1. The threshold chosen by the department head's preference
  2. The shorter, more stringent regulatory threshold Correct answer.
  3. The average of the two thresholds
  4. The longer financial threshold because it is easier to measure

Explanation

When multiple impact dimensions yield different tolerances, the most stringent constraint governs recovery priority because breaching it first creates unacceptable consequences. Averaging or deferring to preference can allow a regulatory breach to occur.

Question 11Business Continuity Management Knowledge (Qualifying Examination content)

A continuity planner is selecting a recovery strategy for a critical application with a two-hour RTO. Which factor most directly constrains the viable options?

  1. The age of the application's user documentation
  2. The physical size of the primary data center
  3. The technical feasibility of restoring the application and its data within two hours Correct answer.
  4. The number of employees in the department that uses the application

Explanation

The RTO sets the time budget, so any strategy must be technically capable of restoring systems and data within that window. Ancillary factors such as headcount or documentation do not determine whether the time target is achievable.

Question 12Business Continuity Management Knowledge (Qualifying Examination content)

What is the primary benefit of conducting a tabletop exercise as part of a continuity program?

  1. It replaces the need for any future full-scale testing
  2. It satisfies insurance requirements for physical asset inspection
  3. It proves that backup systems can restore data within the RTO
  4. It validates decision-making and plan assumptions through discussion without disrupting operations Correct answer.

Explanation

A tabletop exercise tests plans, roles, and assumptions through facilitated discussion, surfacing gaps at low cost and without operational disruption. It does not technically verify system restoration, which requires functional testing.

Question 13Business Continuity Management Knowledge (Qualifying Examination content)

An organization's crisis communication plan should include which of the following as a core component?

  1. The organization's full marketing strategy
  2. Detailed financial statements for the past fiscal year
  3. A complete list of every employee's home address
  4. Pre-approved message templates and designated spokespersons Correct answer.

Explanation

Effective crisis communication depends on pre-approved messaging and clearly designated spokespersons so information is delivered accurately and consistently under pressure. Personal data and unrelated corporate documents do not belong in the communication plan.

Question 14Business Continuity Management Knowledge (Qualifying Examination content)

A supplier's failure would halt a manufacturer's production line within one day. How should the manufacturer address this dependency?

  1. Rely on the supplier's own continuity plan without further action
  2. Identify alternate suppliers and qualify them before an incident occurs Correct answer.
  3. Remove the supplier from the risk register to reduce reported risk
  4. Increase finished-goods inventory for unrelated product lines

Explanation

Supply-chain dependencies are managed by establishing and pre-qualifying alternate sources so a disruption can be absorbed. Sole reliance on a supplier's plan, or removing the risk from the register, leaves the manufacturer exposed.

Question 15Business Continuity Management Knowledge (Qualifying Examination content)

Which metric would best indicate whether an organization's continuity program is improving over time?

  1. The number of pages in the continuity plan
  2. The percentage of recovery objectives met during exercises Correct answer.
  3. The frequency of plan distribution to staff
  4. The total budget allocated to the continuity office

Explanation

Exercise results measured against defined recovery objectives demonstrate whether capabilities actually meet requirements and whether they improve between cycles. Document length, budget, and distribution frequency are inputs, not indicators of capability.

Question 16Business Continuity Management Knowledge (Qualifying Examination content)

A business continuity plan identifies a manual process that can sustain operations for 48 hours. What should the planner verify to confirm the strategy is adequate?

  1. That the function has no regulatory obligations
  2. That the maximum tolerable downtime for the function exceeds 48 hours Correct answer.
  3. That the manual process is documented by the vendor
  4. That the manual process costs less than the automated one

Explanation

A strategy is adequate only if the time it can sustain operations is at least as long as the function's maximum tolerable downtime. Cost, vendor documentation, and regulatory status do not establish time-based adequacy.

Question 17Business Continuity Management Knowledge (Qualifying Examination content)

What is the purpose of establishing a maximum tolerable period of disruption (MTPD) for a business function?

  1. To determine the number of staff assigned to recovery
  2. To define the point beyond which the disruption's impact becomes unacceptable Correct answer.
  3. To establish the annual continuity training schedule
  4. To set the frequency at which backups are performed

Explanation

The MTPD marks the outer boundary of tolerable disruption; recovery objectives must be set within it. Backup frequency, staffing, and training schedules are operational decisions informed by, but distinct from, the MTPD.

Question 18Business Continuity Management Knowledge (Qualifying Examination content)

A continuity plan assumes that the alternate site will be available, but the vendor contract does not guarantee capacity. Which plan weakness does this represent?

  1. An unvalidated dependency that could prevent recovery Correct answer.
  2. An overstatement of the recovery point objective
  3. An excessive focus on preventive controls
  4. A failure to document the organizational chart

Explanation

A recovery plan that relies on a resource without contractual assurance of availability contains an unvalidated dependency that may fail during an actual event. Contractual confirmation of capacity is needed to make the assumption reliable.

Question 19Business Continuity Management Knowledge (Qualifying Examination content)

Which governance structure best supports an enterprise-wide business continuity program?

  1. A single part-time coordinator in the facilities department
  2. A committee composed only of IT operations staff
  3. A temporary task force disbanded after the plan is written
  4. A steering committee with executive sponsorship and cross-functional representation Correct answer.

Explanation

Continuity spans the whole organization, so effective governance requires executive sponsorship and representation from all critical functions. Narrow or temporary structures lack the authority and breadth to sustain the program.

Question 20Business Continuity Management Knowledge (Qualifying Examination content)

A company's data replication is nearly real-time, but its application servers take six hours to restart. What does this indicate about the relationship between RPO and RTO?

  1. The RPO is very low while the RTO is comparatively long Correct answer.
  2. The RTO is very low while the RPO is comparatively long
  3. The RPO and RTO are necessarily equal
  4. The RPO and RTO are both effectively zero

Explanation

Real-time replication minimizes data loss, yielding a low RPO, but the six-hour restart time defines the RTO separately. RPO and RTO measure different things and need not be equal.

Question 21Business Continuity Management Knowledge (Qualifying Examination content)

An organization discovers that its recovery plan works for a single-system outage but fails when a regional event affects facilities, staff, and systems simultaneously. Which concept does this illustrate?

  1. The irrelevance of scenario-based planning
  2. The need to plan for correlated, multi-domain impacts rather than isolated failures Correct answer.
  3. The sufficiency of technology recovery planning alone
  4. The value of reducing the RPO to zero

Explanation

Plans tested only against isolated failures may not hold when a single event produces simultaneous, correlated impacts across domains. Scenario-based planning for broader events addresses this gap.

Question 22Business Continuity Management Knowledge (Qualifying Examination content)

A continuity manager must justify program funding to executives. Which argument is most persuasive under continuity principles?

  1. The number of plan documents produced per year
  2. The seniority of the coordinator leading the program
  3. A comparison of continuity software vendors
  4. Quantified impact of downtime on revenue, obligations, and reputation relative to mitigation cost Correct answer.

Explanation

Business cases for continuity rest on the quantified consequences of disruption compared with the cost of mitigation, which speaks directly to executive risk decisions. Output volume, vendor comparison, and staffing seniority do not establish value.

Question 23Business Continuity Management Knowledge (Qualifying Examination content)

After an exercise reveals that a critical recovery procedure is outdated, what is the most appropriate corrective action?

  1. Remove the procedure from the plan to eliminate the discrepancy
  2. Reassign the finding to the vendor that supplied the system
  3. File the finding and address it during the next annual review cycle
  4. Update the procedure, assign an owner, and verify the fix in a subsequent exercise Correct answer.

Explanation

Exercise findings should be corrected promptly, assigned to a responsible owner, and validated through follow-up testing to confirm the fix works. Deferring or deleting the procedure leaves the gap unresolved.

Question 24Business Continuity Management Knowledge (Qualifying Examination content)

A regulated firm must demonstrate continuity capability to its supervisor. Which evidence most directly demonstrates that capability?

  1. Results of scenario-based tests showing recovery objectives were met Correct answer.
  2. An inventory of backup tapes stored offsite
  3. A list of continuity team members' job titles
  4. A statement in the policy that continuity is important

Explanation

Demonstrated capability is evidenced by test results showing that recovery objectives were achieved under realistic scenarios. Policy statements, role titles, and asset inventories are inputs that do not prove the capability works.

Question 25Business Continuity Management Knowledge (Qualifying Examination content)

An organization wants to reduce the risk of a single point of failure in its continuity arrangements. Which approach best aligns with this goal?

  1. Extending the recovery time objective to allow more preparation
  2. Introducing redundancy and alternate arrangements for critical dependencies Correct answer.
  3. Consolidating all recovery resources at one hardened facility
  4. Increasing the frequency of plan distribution to staff

Explanation

Single points of failure are mitigated by redundancy and alternate arrangements so that no single dependency failure halts recovery. Consolidation increases single-point exposure, and relaxing the RTO does not remove the vulnerability.

Question 26Business Continuity Management Knowledge (Qualifying Examination content)

What is the primary purpose of a business impact analysis (BIA)?

  1. To list every employee's home telephone number
  2. To calculate the annual insurance premium for each building
  3. To record the serial numbers of all backup media stored offsite
  4. To identify time-critical business functions and the consequences of their disruption Correct answer.

Explanation

A BIA determines which functions are time-critical and quantifies the operational, financial, legal and reputational consequences of disruption. It provides the impact-over-time data used to set recovery priorities and objectives.

Question 27Business Continuity Management Knowledge (Qualifying Examination content)

In continuity terminology, what does the recovery time objective (RTO) define?

  1. The period for which archived records must legally be retained
  2. The interval between successive tests of the continuity plan
  3. The maximum volume of transactions that may be lost before the business fails
  4. The maximum acceptable elapsed time to restore a function or system after disruption Correct answer.

Explanation

The RTO is the target elapsed time within which a resource or activity must be restored to avoid unacceptable impact. It is derived from, and must be shorter than, the maximum tolerable period of disruption.

Question 28Business Continuity Management Knowledge (Qualifying Examination content)

How does a recovery point objective (RPO) differ from a recovery time objective (RTO)?

  1. The RPO applies only to physical sites, while the RTO applies only to software
  2. The RPO concerns acceptable data loss measured in time, while the RTO concerns acceptable outage duration Correct answer.
  3. The RPO is always longer than the RTO for the same system
  4. The RPO is set by auditors, while the RTO is set by the IT department

Explanation

The RPO defines how far back in time data may be lost, driving backup and replication frequency. The RTO defines how quickly the function must be available again. They are independent measures and neither is inherently longer than the other.

Question 29Business Continuity Management Knowledge (Qualifying Examination content)

What distinguishes a business continuity plan from a disaster recovery plan?

  1. The continuity plan is used after recovery is complete, while disaster recovery is used before
  2. The continuity plan covers only natural disasters, while disaster recovery covers only cyber incidents
  3. The continuity plan addresses the whole organization's critical business functions, while disaster recovery focuses on technology restoration Correct answer.
  4. The continuity plan is written by external auditors, while disaster recovery is written by regulators

Explanation

Business continuity management covers the organization's end-to-end operational resilience, including people, premises, suppliers and processes. Disaster recovery is the technology-focused subset concerned with restoring IT infrastructure and data.

Question 30Business Continuity Management Knowledge (Qualifying Examination content)

Which statement best describes the concept of a maximum tolerable period of disruption (MTPD)?

  1. It is the longest downtime that insurers will reimburse without a surcharge
  2. It is the statutory notice period before an organization may suspend a service
  3. It is the point in time by which a disruption's harm becomes unacceptable to stakeholders Correct answer.
  4. It is the total time needed to fully rebuild a destroyed primary facility

Explanation

The MTPD is the threshold beyond which the impacts of a disruption become unacceptable to the organization and its stakeholders. Recovery objectives are set to be achieved comfortably within that threshold.

Question 31Business Continuity Management Knowledge (Qualifying Examination content)

Why should continuity plans be exercised rather than merely documented?

  1. Exercising satisfies the requirement to store copies of the plan at an offsite location
  2. Exercising removes the need to maintain any written procedures
  3. Exercising transfers legal liability for outages to the exercise participants
  4. Exercising validates that plans, people and resources actually work together under realistic conditions Correct answer.

Explanation

Exercises test the assumptions, interfaces and competencies on which a plan depends, revealing gaps that documentation alone cannot expose. They are a means of validation, not a substitute for documented procedures.

Question 32Business Continuity Management Knowledge (Qualifying Examination content)

What is the role of a crisis management team during a major disruption?

  1. To perform the technical restoration of servers and network equipment
  2. To make strategic decisions, set priorities and coordinate communications at a senior level Correct answer.
  3. To audit the continuity program against the relevant standard
  4. To negotiate the purchase of replacement hardware from vendors

Explanation

The crisis management team provides senior-level direction, decision-making and stakeholder communication during an incident. Technical restoration and procurement are delegated to operational and recovery teams.

Question 33Business Continuity Management Knowledge (Qualifying Examination content)

Which of the following is a recognized benefit of maintaining an alternate work area arrangement?

  1. It replaces the requirement to perform a business impact analysis
  2. It guarantees that suppliers will continue deliveries during a disruption
  3. It eliminates the need to back up data stored at the primary site
  4. It provides pre-identified space and facilities for relocated staff when the primary site is unavailable Correct answer.

Explanation

An alternate work area gives displaced staff a known, prepared location from which critical functions can continue. It supports continuity of people and processes but does not address data protection, supplier behaviour or impact analysis.

Question 34Business Continuity Management Knowledge (Qualifying Examination content)

A planner is setting recovery objectives for a payment function. Financial impact is tolerable for six hours but a regulator requires service resumption within four hours. What should the planner adopt as the effective MTPD?

  1. Six hours, because financial impact is the primary measure of disruption
  2. Four hours, but only during the regulator's business hours
  3. Ten hours, because the two constraints are added together
  4. Four hours, because the binding constraint is the earliest unacceptable threshold Correct answer.

Explanation

The MTPD is governed by whichever constraint is reached first, whether financial, regulatory or reputational. The four-hour regulatory limit is therefore binding, and recovery objectives must be set within it.

Question 35Business Continuity Management Knowledge (Qualifying Examination content)

A department can tolerate an outage for 12 hours, but its only server takes 20 hours to rebuild from bare metal. What does this gap most directly indicate?

  1. The department should accept the risk without any further action
  2. The recovery capability is insufficient and the strategy must be changed or the objective renegotiated Correct answer.
  3. The RTO should be increased to 20 hours to match the current capability
  4. The BIA was performed incorrectly and should be discarded

Explanation

When demonstrated recovery capability exceeds the tolerable period, the organization faces an unmitigated gap. It must either improve capability, for example through standby equipment or replication, or formally renegotiate the business requirement.

Question 36Business Continuity Management Knowledge (Qualifying Examination content)

An organization depends on a single cloud provider for a critical service. Which continuity action best addresses concentration risk?

  1. Increase the volume of data backed up to the same provider
  2. Rely on the provider's public marketing claims about uptime
  3. Assess the provider's resilience and exit arrangements and consider a secondary provider for critical components Correct answer.
  4. Extend the contract term to obtain a loyalty discount

Explanation

Concentration risk is managed by understanding the dependency, verifying the provider's resilience and exit provisions, and reducing reliance through diversification where justified. Contract length and backup volume do not reduce the concentration itself.

Question 37Business Continuity Management Knowledge (Qualifying Examination content)

A continuity plan requires staff to work from home, but the organization has never tested remote access at scale. What is the most appropriate next step?

  1. Conduct a scenario exercise that activates remote working for a defined group and measure the results Correct answer.
  2. Assume the capability exists because remote access software is licensed
  3. Wait for an actual disruption to reveal whether the capability works
  4. Remove remote working from the plan to avoid an untested assumption

Explanation

Untested assumptions are a common cause of plan failure, so they should be validated through a controlled exercise that measures actual capacity and performance. Licensing software does not demonstrate that the capability works at the required scale.

Question 38Business Continuity Management Knowledge (Qualifying Examination content)

Which factor should most strongly influence the choice between a hot site and a cold site for a critical operation?

  1. The seniority of the manager who signs the plan
  2. The geographic distance between the two sites alone
  3. The recovery time objective and the acceptable cost of achieving it Correct answer.
  4. The number of pages in the continuity plan

Explanation

Site strategy is a trade-off between how quickly operations must resume and how much the organization is willing to spend. A hot site delivers rapid recovery at high cost, while a cold site is cheaper but slower.

Question 39Business Continuity Management Knowledge (Qualifying Examination content)

A business impact analysis shows that a warehouse function can be suspended for 72 hours, but its order-processing system has an RTO of 8 hours. How should the planner interpret this?

  1. The warehouse should be closed for 72 hours after every outage
  2. The system should be decommissioned because its objective is too aggressive
  3. The system supports other time-critical functions or processes that require the shorter objective Correct answer.
  4. The BIA is wrong because the system objective must equal the warehouse tolerance

Explanation

A supporting system may serve several business functions, so its recovery objective is driven by the most demanding dependent function rather than by any single one. The apparent mismatch usually indicates additional dependencies.

Question 40Business Continuity Management Knowledge (Qualifying Examination content)

What is the main purpose of a business continuity policy approved by senior management?

  1. To establish the program's scope, objectives, authority and accountability across the organization Correct answer.
  2. To list the names of every employee trained in first aid
  3. To document the detailed technical steps for restoring each server
  4. To record the minutes of each continuity exercise

Explanation

A policy sets the mandate, scope and governance for the continuity program and assigns accountability. Detailed procedures, training records and exercise minutes are supporting documents beneath the policy.

Question 41Business Continuity Management Knowledge (Qualifying Examination content)

An organization wants assurance that its continuity arrangements will perform as intended. Which activity provides the most direct evidence?

  1. Circulating the plan to all staff by email
  2. Conducting a structured exercise and evaluating performance against defined objectives Correct answer.
  3. Reviewing the plan's table of contents for completeness
  4. Storing a printed copy of the plan in the reception area

Explanation

Assurance comes from observing actual performance against measurable objectives during an exercise. Distribution and document reviews confirm only that the plan exists, not that it works.

Question 42Business Continuity Management Knowledge (Qualifying Examination content)

During an incident, who should authorize invocation of the business continuity plan?

  1. The supplier whose service has failed
  2. The external auditor assigned to the continuity program
  3. The person or role designated in the plan's invocation criteria and authority matrix Correct answer.
  4. Any employee who first notices the disruption

Explanation

Plans specify invocation criteria and named authorities so that activation is timely, consistent and accountable. Leaving activation to whoever notices the event risks inconsistent or premature responses.

Question 43Business Continuity Management Knowledge (Qualifying Examination content)

A continuity manager finds that two business units have independently contracted alternate office space with the same provider. What is the most significant continuity concern?

  1. The two units will produce inconsistent documentation formats
  2. A shared provider failure or capacity shortfall could affect both units simultaneously Correct answer.
  3. The provider will charge higher prices for the duplicate arrangements
  4. The arrangement duplicates travel expenses for staff

Explanation

Shared dependencies create common-mode failure, so a single provider problem could deny recovery space to multiple units at once. The concern is resilience, not administrative cost or formatting.

Question 44Business Continuity Management Knowledge (Qualifying Examination content)

What is the relationship between a business continuity management system and the plan documents it produces?

  1. The management system is the ongoing governance process, and plans are outputs maintained within it Correct answer.
  2. The plan documents constitute the entire management system
  3. The plan documents replace the need for management review
  4. The management system applies only after a plan has failed

Explanation

A management system provides the continuing cycle of policy, analysis, implementation, testing and review. Plans are living outputs of that cycle and depend on it to remain current and effective.

Question 45Business Continuity Management Knowledge (Qualifying Examination content)

An organization's critical activity depends on a specialized machine available from only one supplier with a 12-week lead time. Which continuity measure is most appropriate?

  1. Hold a strategic spare of the machine or its critical components and qualify an alternative source Correct answer.
  2. Increase the production volume processed by the single machine
  3. Reduce the machine's maintenance schedule to lower operating cost
  4. Require the supplier to confirm that it has never experienced a failure

Explanation

Where lead times exceed tolerable disruption, holding strategic spares or qualifying an alternative source reduces the impact of failure. Supplier assurances and cost reductions do not shorten the recovery lead time.

Question 46Business Continuity Management Knowledge (Qualifying Examination content)

A continuity exercise reveals that the crisis team's decision log was not maintained, so actions could not be traced. Which corrective action addresses the root cause most effectively?

  1. Abandon the exercise programme because it produced adverse findings
  2. Discipline the individuals who participated in the exercise
  3. Build a decision-logging step into the crisis team's procedures and rehearse it in the next exercise Correct answer.
  4. Add a statement to the plan that decisions will be documented

Explanation

The gap reflects a missing process step rather than individual fault, so embedding logging into procedures and rehearsing it prevents recurrence. Corrective action should change the system that allowed the gap.

Question 47Business Continuity Management Knowledge (Qualifying Examination content)

A regional event disables both the primary data centre and the alternate site because they are 15 kilometres apart. What design principle was violated?

  1. Encryption of data at rest in the primary facility
  2. Geographic separation sufficient to avoid a common hazard affecting both sites Correct answer.
  3. Redundancy of application servers within a single location
  4. Segregation of duties between operators and administrators

Explanation

Alternate sites must be far enough apart that a single regional hazard cannot affect both simultaneously. Proximity created a common-mode failure that defeated the recovery strategy.

Question 48Business Continuity Management Knowledge (Qualifying Examination content)

A business owner insists that a function's RTO be set at 30 minutes, but the impact analysis indicates tolerable disruption of one working day. What should the continuity professional do?

  1. Accept the 30-minute objective and fund the most expensive recovery option available
  2. Reject the business owner's input because only IT may set recovery objectives
  3. Challenge the requirement with the impact evidence and agree an objective that reflects justified business need Correct answer.
  4. Record both figures in the plan without resolving the discrepancy

Explanation

Recovery objectives should be evidence-based and proportionate to impact, so the professional should test the stated requirement against the analysis and reach agreement. Accepting unjustified targets or leaving conflicts unresolved undermines the program.

Question 49Business Continuity Management Knowledge (Qualifying Examination content)

Which approach best ensures that continuity arrangements remain effective as the organization changes over time?

  1. Relying on the version issued at the program's launch
  2. Updating only the contact list when staff change roles
  3. Reviewing the plan only after a disruption has occurred
  4. Scheduling periodic reviews triggered by both time intervals and significant organizational change Correct answer.

Explanation

Change-driven and interval-based reviews keep plans aligned with the current organization, technology and risks. Reviewing only after failure or relying on a launch version allows drift to accumulate unnoticed.

Question 50Business Continuity Management Knowledge (Qualifying Examination content)

Which term describes the point in time to which data must be restored after a disruption in order to resume processing?

  1. Service level objective
  2. Recovery point objective Correct answer.
  3. Maximum tolerable period of disruption
  4. Recovery time objective

Explanation

The recovery point objective (RPO) defines how much data loss is acceptable by specifying the point in time to which data must be recovered. The recovery time objective instead measures how quickly the function must be restored.