2025 Latest CBCP-002 DUMPS Q&As with Explanations Verified & Correct Answers
CBCP-002 dumps Exam Material with 42 Questions
To sit for the GAQM CBCP-002 Certification Exam, candidates must have a minimum of two years of experience in business continuity planning in addition to a bachelor's degree or higher. Alternatively, individuals without a bachelor's degree but have five or more years of relevant work experience are also eligible to sit for the exam.
GAQM CBCP-002 certification is an essential certification for continuity planning, disaster recovery, and risk management professionals. Certified Business Continuity Professional (CBCP) certification exam is designed to test the theoretical knowledge and practical skills of candidates in BCM, and the certification program supports professionals in advancing their careers. The CBCP certification provides a global recognition of the candidate's expertise and establishes credibility in the field of BCM.
NEW QUESTION # 11
Which control mechanism is the process by which an organization reduces the likelihood of a risk event occurring or mitigates the effects should it occur?
- A. Risk collision
- B. Risk variation
- C. Risk control
- D. Risk avoidance
Answer: C
Explanation:
Risk control is the control mechanism that is the process by which an organization reduces the likelihood of a risk event occurring or mitigates the effects should it occur. Risk control is the process of implementing measures or actions to modify or influence the risk level of an organization. Risk control can involve various strategies, such as avoidance, reduction, transfer, sharing, retention, or acceptance. Risk control can help to improve the organization's resilience and performance. Verified References: https://www.investopedia.com
/terms/r/risk-control.asphttps://www.thebci.org/training-qualifications/good-practice-guidelines.html
NEW QUESTION # 12
Which of the following are three components of business continuity plan? (Choose three)
- A. Business recovery
- B. Emergency response
- C. Problem management
- D. Disaster recovery
- E. Incident management
Answer: B,D,E
Explanation:
Explanation
The three components of a business continuity plan are emergency response, incident management, and disaster recovery. They are:
Emergency response: This component involves the immediate actions taken to protect the life, health, and safety of people and the environment in the event of a disruption. Emergency response may include activating alarms, evacuating premises, contacting emergency services, or providing first aid.
Incident management: This component involves the coordination and communication of the activities and resources required to manage and resolve a disruption. Incident management may include activating the business continuity team, declaring a disaster, assessing the impact, activating the recovery strategies, or communicating with stakeholders.
Disaster recovery: This component involves the restoration and recovery of the IT systems, data, and infrastructure that support the critical functions and processes of the organization. Disaster recovery may include activating the backup systems, restoring the data, repairing or replacing the equipment, or testing the functionality. Verified References: https://www.ready.gov/business-continuity-plan
https://www.csoonline.com/article/515730/business-continuity-and-disaster-recovery-planning-the-basics.
NEW QUESTION # 13
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick.
- A. False
- B. True
Answer: B
Explanation:
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick. This is true because an illness pandemic is a type of natural disaster that can affect an organization's ability to continue its normal operations. An illness pandemic can cause absenteeism, reduced productivity, increased costs, supply chain disruptions, customer dissatisfaction, or regulatory compliance issues. Therefore, an organization may need to declare a disaster and activate its business continuity and disaster recovery plan if an illness pandemic impacts its critical functions and processes beyond an acceptable level. Verified References: https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article/515730
/business-continuity-and-disaster-recovery-planning-the-basics.html
NEW QUESTION # 14
Which register maintains information on all the identified risks relating to an organization?
- A. Risk register
- B. Index register
- C. Memory Data Register
- D. Crisis register
Answer: A
Explanation:
A risk register is a register that maintains information on all the identified risks relating to an organization. A risk register is a document or a tool that records and tracks the details of each risk, such as its description, source, impact, likelihood, rating, owner, status, response strategy, action plan, and monitoring method. A risk register is a useful tool for managing risks and communicating them to stakeholders. Verified References:
https://www.investopedia.com/terms/r/risk-register.asphttps://www.thebci.org/training-qualifications/good- practice-guidelines.html
NEW QUESTION # 15
Damage assessment includes all but which of the following steps?
- A. Estimate the time it will take to restore critical business functions.
- B. Evaluating the time to restore operations and if greater than the MTD, a disaster should be declared and BCP enacted
- C. Having the insurance company declare the total extent of the damages.
- D. Identifying the affected business functions.
Answer: C
Explanation:
Damage assessment is the process of evaluating the extent and severity of the damage caused by a disruption to an organization's facilities, equipment, systems, data, records, or personnel. It includes identifying the affected business functions and processes, estimating the time it will take to restore them to normal or acceptable levels of operation, and evaluating whether the recovery time exceeds the maximum tolerable downtime (MTD) for each function or process. If so, a disaster should be declared and the business continuity plan should be activated. Having the insurance company declare the total extent of the damages is not part of the damage assessment process, as it may take longer than the MTD and may not reflect the operational impact of the damage. Verified References: https://www.fema.gov/pdf/emergency/nims/Damage_Assessment.
pdfhttps://drii.org/resources/professionalpractices/EN
NEW QUESTION # 16
Risks are diverse and arise from both external and internal sources.
- A. False
- B. True
Answer: B
Explanation:
Risks are diverse and arise from both external and internal sources. This is true because risks are uncertainties that can have positive or negative effects on an organization's objectives. Risks can arise from various sources that are either outside or inside the organization's control. External sources of risk include natural disasters, cyberattacks, market fluctuations, customer preferences, competition, regulation, or political instability.
Internal sources of risk include human error, fraud, system failure, process inefficiency, organizational culture, or strategic decisions. Verified References: https://www.investopedia.com/terms/b/businessrisk.
asphttps://www.thebci.org/training-qualifications/good-practice-guidelines.html
NEW QUESTION # 17
Individual accountability for the management of the risk should be clearly established.
- A. False
- B. True
Answer: B
Explanation:
Individual accountability for the management of the risk should be clearly established. This is true because accountability is one of the key principles of business continuity management. Accountability means that each person involved in the business continuity management program has a clear understanding of their roles and responsibilities, as well as the authority and resources to perform them. Accountability also means that each person is held responsible for their actions and outcomes, and that they report on their performance and progressregularly. Verified References: https://www.iso.org/publication/PUB100442.htmlhttps://phoenixnap.
com/blog/what-is-business-continuity-management
NEW QUESTION # 18
Which Process can be both time consuming and expensive as a result, management will expect tangible benefits to be achieved by the process?
- A. Business Contingency Planning
- B. Business Process Planning
- C. Business Continuity Planning
- D. Business Ethical Planning
Answer: C
Explanation:
Explanation
Business continuity planning is the process of identifying, developing, and implementing strategies and plans to ensure the continuity of an organization's critical functions and processes in the event of a disruption. It can be both time consuming and expensive, as it requires a thorough analysis of risks, impacts, resources, and recovery options. However, management will expect tangible benefits from the process, such as reduced losses, increased resilience, improved reputation, and compliance with regulations. Verified References:
https://www.ready.gov/business-continuity-plan https://drii.org/resources/professionalpractices/EN
NEW QUESTION # 19
Which system in place enables you to balance risk and entrepreneurial energy with appropriate internal control procedures to manage that risk?
- A. Banking System
- B. Auditing Report
- C. Corporate Governance
- D. Quality Management System
Answer: C
Explanation:
Explanation
Corporate governance is the system of rules, practices, and processes by which an organization is directed and controlled. It involves balancing the interests of various stakeholders, such as shareholders, management, customers, suppliers, regulators, and the community. It also enables an organization to balance risk and entrepreneurial energy with appropriate internal control procedures to manage that risk. Effective corporate governance can enhance performance, accountability, transparency, and trust. Verified References:
https://www.investopedia.com/terms/c/corporategovernance.asphttps://www.thebci.org/training-qualifications/go
NEW QUESTION # 20
Damage assessment includes all but which of the following steps?
- A. Estimate the time it will take to restore critical business functions.
- B. Evaluating the time to restore operations and if greater than the MTD, a disaster should be declared and BCP enacted
- C. Having the insurance company declare the total extent of the damages.
- D. Identifying the affected business functions.
Answer: C
Explanation:
Explanation
Damage assessment is the process of evaluating the extent and severity of the damage caused by a disruption to an organization's facilities, equipment, systems, data, records, or personnel. It includes identifying the affected business functions and processes, estimating the time it will take to restore them to normal or acceptable levels of operation, and evaluating whether the recovery time exceeds the maximum tolerable downtime (MTD) for each function or process. If so, a disaster should be declared and the business continuity plan should be activated. Having the insurance company declare the total extent of the damages is not part of the damage assessment process, as it may take longer than the MTD and may not reflect the operational impact of the damage. Verified References:
https://www.fema.gov/pdf/emergency/nims/Damage_Assessment.pdfhttps://drii.org/resources/professionalpracti
NEW QUESTION # 21
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick.
- A. False
- B. True
Answer: B
Explanation:
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick. This is true because an illness pandemic is a type of natural disaster that can affect an organization's ability to continue its normal operations. An illness pandemic can cause absenteeism, reduced productivity, increased costs, supply chain disruptions, customer dissatisfaction, or regulatory compliance issues. Therefore, an organization may need to declare a disaster and activate its business continuity and disaster recovery plan if an illness pandemic impacts its critical functions and processes beyond an acceptable level.
VerifiedReferences: https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article
/515730/business-continuity-and-disaster-recovery-planning-the-basics.html
NEW QUESTION # 22
A disaster lasting longer than seventy-two (72) hours requires implementation of which of the following:
- A. Business Continuity and Disaster Recovery Plan
- B. Short Term Business Continuity Plan
Answer: A
Explanation:
A disaster lasting longer than seventy-two (72) hours requires implementation of a business continuity and disaster recovery plan. A business continuity and disaster recovery plan is a comprehensive document that outlines how an organization will respond to and recover from adisaster that disrupts its normal operations. It covers both the IT aspects (disaster recovery) and the business aspects (business continuity) of restoring the critical functions and processes within an acceptable time frame. A disaster lasting longer than seventy-two (72) hours is likely to have significant impacts on the organization's performance, reputation, assets, and stakeholders, and therefore requires a coordinated and structured approach to ensure its survival and resilience. Verified References: https://www.ready.gov/business-continuity-planhttps://www.csoonline.com
/article/515730/business-continuity-and-disaster-recovery-planning-the-basics.html
NEW QUESTION # 23
Which certification centre provides the physical infrastructure?
- A. Facility
- B. Service
Answer: A
Explanation:
Explanation
A facility certification center is a center that provides the physical infrastructure for testing and certifying the functionality and performance of products, systems, or services. A facility certification center may have specialized equipment, tools, environments, or standards that can simulate real-world conditions or scenarios.
A facility certification center may also have qualified staff, experts, or auditors who can conduct the testing and certification process. Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://www.cisco.com/c/en/us/solutions/hybrid-work/what-is-
NEW QUESTION # 24
Which of the following exercises involve all teams?
- A. Plan walkthrough
- B. Full-scale exercise
- C. Multi-team simulation
- D. Facilitated discussion
Answer: B
Explanation:
A full-scale exercise is a type of exercise that involves all teams. A full-scale exercise is a high-pressure exercise that simulates a realistic scenario of a disruption that affects all or most of the organization's functions and processes. A full-scale exercise tests the effectiveness and efficiency of the plans, procedures, systems, teams, and resources that are required to respond to and recover from a disruption. A full-scale exercise also evaluates the coordination and communication among all the teams and stakeholders involved.
Verified References: https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article
/515730/business-continuity-and-disaster-recovery-planning-the-basics.html
NEW QUESTION # 25
Which of the following four are action approach crisis and post-crisis management? (Choose four R's)
- A. Response
- B. Rustic
- C. Reduction
- D. Readiness
- E. Recovery
- F. Rss Feed
Answer: A,C,D,E
Explanation:
Explanation
The four R's are action approaches for crisis and post-crisis management. They are:
Reduction: This approach aims to prevent or mitigate the occurrence or impact of a crisis by identifying and addressing the root causes, vulnerabilities, and risks.
Readiness: This approach aims to prepare for a potential crisis by developing plans, policies, procedures, systems, teams, and resources that can enable a timely and effective response.
Response: This approach aims to manage a crisis by activating the plans, policies, procedures, systems, teams, and resources that can contain, control, and resolve the situation.
Recovery: This approach aims to restore normal operations after a crisis by implementing actions that can repair damages, restore functions and processes, resume services and products, recover losses, and learn lessons. Verified References:
https://www.cisco.com/c/en/us/solutions/hybrid-work/what-is-business-continuity.html
https://phoenixnap.com/blog/what-is-business-continuity-management
NEW QUESTION # 26
Which type of continuity planning will enhance the functioning relationship with the organization's key suppliers, creating stronger assurances of continuous supply of information, material product and services?
- A. Multilateral
- B. Bilateral
- C. Unilateral
Answer: B
Explanation:
Explanation
Bilateral continuity planning is the type of continuity planning that will enhance the functioning relationship with the organization's key suppliers, creating stronger assurances of continuous supply of information, material product and services. Bilateral continuity planning is the process of developing and maintaining mutual agreements and arrangements between an organization and its key suppliers to ensure the continuity of their respective functions and processes in the event of a disruption. Bilateral continuity planning can help to reduce risks, costs, and dependencies, as well as to improve communication, coordination, and collaboration.
Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://phoenixnap.com/blog/what-is-business-continuity-mana
NEW QUESTION # 27
Damage assessment includes all but which of the following steps?
- A. Estimate the time it will take to restore critical business functions.
- B. Evaluating the time to restore operations and if greater than the MTD, a disaster should be declared and BCP enacted
- C. Having the insurance company declare the total extent of the damages.
- D. Identifying the affected business functions.
Answer: C
Explanation:
Explanation
Damage assessment is the process of evaluating the extent and severity of the damage caused by a disruption to an organization's facilities, equipment, systems, data, records, or personnel. It includes identifying the affected business functions and processes, estimating the time it will take to restore them to normal or acceptable levels of operation, and evaluating whether the recovery time exceeds the maximum tolerable downtime (MTD) for each function or process. If so, a disaster should be declared and the business continuity plan should be activated. Having the insurance company declare the total extent of the damages is not part of the damage assessment process, as it may take longer than the MTD and may not reflect the operational impact of the damage. Verified References:
https://www.fema.gov/pdf/emergency/nims/Damage_Assessment.pdfhttps://drii.org/resources/professionalpracti
NEW QUESTION # 28
......
The Certified Business Continuity Professional (CBCP) certification exam, offered by the Global Association for Quality Management (GAQM), is designed to test the knowledge, skills, and abilities of professionals in the field of business continuity planning. Certified Business Continuity Professional (CBCP) certification is intended for individuals who are responsible for developing and implementing business continuity plans, as well as those who are involved in maintaining and testing these plans. The CBCP certification exam covers a wide range of topics related to business continuity planning, including risk assessment, business impact analysis, crisis management, and disaster recovery.
Share Latest CBCP-002 DUMP Questions and Answers: https://pass4sure.guidetorrent.com/CBCP-002-dumps-questions.html