1.
Which one of the following is NOT one of the outcomes of a vulnerability assessment?
2.
The scope and focus of the Business continuity plan development depends most on:
3.
Which of the following items is NOT a benefit of cold sites?
4.
Qualitative loss resulting from the business interruption does NOT usually include:
5.
When you update records in multiple locations or you make a copy of the whole database at a remote location as a way to achieve the proper level of fault-tolerance and redundancy, it is knows as?
6.
Recovery Site Strategies for the technology environment depend on how much downtime an organization can tolerate before the recovery must be completed.
What would you call a strategy where the alternate site is internal, standby ready, with all the technology and equipment necessary to run the applications?
7.
What is the most correct choice below when talking about the steps to resume normal operation at the primary site after the green light has been given by the salvage team?
8.
What would be the Annualized Rate of Occurrence (ARO) of the threat "user input error", in the case where a company employs 100 data entry clerks and every one of them makes one input error each month?
9.
How is Annualized Loss Expectancy (ALE) derived from a threat?
10.
What does "residual risk" mean?