20+ practice questions focused on Business Continuity, Disaster Recovery, and Incident Response — one of the most tested topics on the ISC2 Certified in Cybersecurity CC exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Business Continuity, Disaster Recovery, and Incident Response PracticeA company is developing a business continuity plan. Which document identifies critical business functions and their dependencies, including the maximum acceptable downtime?
Explanation: A Business Impact Analysis (BIA) identifies critical business functions, dependencies, and quantifies the impact of disruptions, including maximum tolerable downtime (MTD).
An organization's recovery time objective (RTO) for its customer database is 4 hours, and the recovery point objective (RPO) is 1 hour. The database is backed up every hour using full backups. A disaster occurs at 2:00 PM, and the last successful backup was at 1:00 PM. The system is restored and operational at 5:30 PM, but data from 1:00 PM to 2:00 PM is lost. Which statement is correct?
Explanation: The RTO (4 hours) was met because recovery took 3.5 hours (2:00 PM to 5:30 PM). The RPO (1 hour) was exceeded because the data loss was 1 hour (consistent with backup frequency), but the question implies the loss is exactly 1 hour; however, the backup at 1:00 PM covers up to that time, and the loss of 1 hour is within the RPO of 1 hour. Actually, the loss is from 1:00 PM to 2:00 PM = 1 hour, which meets the RPO. So both RTO and RPO were met.
During a disaster recovery test, an organization uses a warm site. The site has partially configured servers and network infrastructure but lacks recent data. The recovery team expects to have the system operational within 2 days. Which recovery metric is most directly addressed by the warm site's capabilities?
Explanation: A warm site typically has hardware and partial configuration, allowing recovery in days. This directly impacts the recovery time objective (RTO), which is the target time for restoring systems and data.
An organization stores backup data on a tape drive (onsite) and also replicates critical data to a cloud storage service. This practice best exemplifies which backup rule?
Explanation: The 3-2-1 rule states: have at least 3 copies of data, on 2 different media types, with 1 copy offsite. Here, tape (onsite) and cloud (offsite) provide two media types and an offsite copy.
Which recovery site strategy provides the shortest recovery time objective (RTO), typically measured in hours, by maintaining a fully mirrored environment that can be activated immediately?
Explanation: A hot site is fully configured with hardware, software, and real-time data replication, enabling recovery within hours.
+15 more Business Continuity, Disaster Recovery, and Incident Response questions available
Practice all Business Continuity, Disaster Recovery, and Incident Response questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Business Continuity, Disaster Recovery, and Incident Response. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Business Continuity, Disaster Recovery, and Incident Response questions on the CC frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Business Continuity, Disaster Recovery, and Incident Response is tested as part of the ISC2 Certified in Cybersecurity CC blueprint. Practicing with targeted Business Continuity, Disaster Recovery, and Incident Response questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CC practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Business Continuity, Disaster Recovery, and Incident Response is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Business Continuity, Disaster Recovery, and Incident Response practice session with instant scoring and detailed explanations.
Start Business Continuity, Disaster Recovery, and Incident Response Practice →