100-160 Question 218
Select 2A financial services company is located in an area prone to both hurricanes and cyberattacks. They want to ensure operations can continue without significant downtime during these events. Which TWO components should be prioritized in their disaster recovery plan (DRP) and business continuity plan (BCP)?
- A
Regularly testing data backups to ensure their integrity
- B
Implementing a preventive control such as a firewall to block unauthorized access
- C
Outlining a communication plan for notifying employees during disasters
- D
Purchasing insurance to cover financial losses from disasters
- E
Establishing a secondary data center in a geographically distant location
Show answer and explanation
Correct answers: A, E
Explanation
Disaster recovery plans (DRPs) and business continuity plans (BCPs) aim to minimize downtime and maintain operations. Regularly testing backups ensures data is recoverable, a core aspect of DRP. Establishing a geographically distant secondary data center ensures operations can continue even if the primary site is impacted by natural or human-caused disasters, aligning with both DRP and BCP objectives.
- A. Correct.
Ensuring the integrity of backups is critical for disaster recovery. Regular testing helps verify that data can be restored in case of a disaster, such as a hurricane or cyberattack.
- B. Incorrect.
While preventive controls like firewalls are essential for cybersecurity, they are not directly related to disaster recovery or business continuity planning.
- C. Incorrect.
A communication plan is important for managing employees during a disaster, but it does not directly address disaster recovery or business continuity in terms of maintaining operations.
- D. Incorrect.
Insurance is useful for mitigating financial losses, but it does not ensure operational continuity or data recovery during disasters.
- E. Correct.
A secondary data center provides redundancy and ensures operations continue in case the primary location is compromised, aligning with both DRP and BCP goals.