Which of the following risk concepts requires an organization to determine the number of failures per
year?

Upper management decides which risk to mitigate based on cost. This is an example of:

Corporate IM presents multiple concerns to enterprise IT. Which of the following concerns should Jane,
the IT security manager, ensure are under control? (Select THREE).

Which of the following is being tested when a company’s payroll server is powered off for eight hours?

A security administrator is reviewing the company’s continuity plan. The plan specifies an RTO of six hours
and RPO of two days. Which of the following is the plan describing?

Pete, the system administrator, is reviewing his disaster recovery plans. He wishes to limit the downtime
in the event of a disaster, but does not have the budget approval to implement or maintain an offsite
location that ensures 99.99% availability. Which of the following would be Pete’s BEST option?

When a communications plan is developed for disaster recovery and business continuity plans, the MOST
relevant items to include would be: (Select TWO).

Ann is starting a disaster recovery program. She has gathered specifics and team members for a meeting
on site. Which of the following types of tests is this?

After a production outage, which of the following documents contains detailed information on the order
in which the system should be restored to service?

Which of the following concepts defines the requirement for data availability?