What is the MOST critical piece to disaster recovery and continuity planning?
Answer(s): B
The keyword is ' MOST CRITICAL ' and the correct answer is ' Management Support ' as the management must be convinced of its necessity and that's why a business case must be made. The decision of how a company should recover from any disaster is purely a business decision and should be treated as so.The other answers are incorrect because :Security policy is incorrect as it is not the MOST CRITICAL piece.Availability of backup information processing facilities is incorrect as this comes once the organization has BCP Plans in place and for a BCP Plan , management support must be there.Staff training comes after the plans are in place with the support from management. Reference : Shon Harris , AIO v3 , Chapter-9: Business Continuity Planning , Page : 697.
During the testing of the business continuity plan (BCP), which of the following methods of results analysis provides the BEST assurance that the plan is workable?
Answer(s): C
It is important to have ways to measure the success of the plan and tests against the stated objectives. Therefore, results must be quantitatively gauged as opposed to an evaluation based only on observation. Quantitatively measuring the results of the test involves a generic statement measuring all the activities performed during BCP, which gives the bestassurance of an effective plan. Although choices A and B are also quantitative, they relate to specific areas, or an analysis of results from one viewpoint, namely the accuracy of the results and the elapsed time.
Information Systems Audit and Control Association, Certified Information Systems Auditor 2002 review manual, Chapter 5: Disaster Recovery and Business Continuity (page 269).
Which of the following statements regarding an off-site information processing facility is TRUE?
Answer(s): A
It is very important that the offsite has the same restrictions in order to avoide misuse.The following answers are incorrect because:It should be located in proximity to the originating site so that it can quickly be made operational is incorrect as the offsite is also subject to the same disaster as of the primary site.It should be easily identified from the outside so in the event of an emergency it can be easily found is also incorrect as it should not be easily identified to prevent intentional sabotage. Need not have the same level of environmental monitoring as the originating site since this would be cost prohibitive is also incorrect as it should be like its primary site.
What is the PRIMARY goal of incident handling?
Answer(s): D
This is the PRIMARY goal of an incident handling process.The other answers are incorrect because :Successfully retrieve all evidence that can be used to prosecute is more often used in identifying weaknesses than in prosecuting.Improve the company's ability to be prepared for threats and disasters is more appropriate for a disaster recovery plan.Improve the company's disaster recovery plan is also more appropriate for disaster recovery plan.
Shon Harris AIO v3 , Chapter - 10 : Law, Investigation, and Ethics , Page : 727-728
Which of the following outlined how senior management are responsible for the computer and information security decisions that they make and what actually took place within their organizations?
In 1991, U.S. Federal Sentencing Guidelines were developed to provide judges with courses of action in dealing with white collar crimes. These guidelines provided ways that companies and law enforcement should prevent, detect and report computer crimes. It also outlined how senior management are responsible for the computer and information security decisions that they make and what actually took place within their organizations.
Post your Comments and Discuss ISC SSCP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SSCP content, but please register or login to continue.