Get Oct-2023 updated Exam CBCP-002 Dumps with New Questions
100% Pass Guarantee for CBCP-002 Exam Dumps with Actual Exam Questions
The Certified Business Continuity Professional (CBCP) certification exam, offered by the Global Association for Quality Management (GAQM), is designed to test the knowledge, skills, and abilities of professionals in the field of business continuity planning. Certified Business Continuity Professional (CBCP) certification is intended for individuals who are responsible for developing and implementing business continuity plans, as well as those who are involved in maintaining and testing these plans. The CBCP certification exam covers a wide range of topics related to business continuity planning, including risk assessment, business impact analysis, crisis management, and disaster recovery.
NEW QUESTION # 12
Which type of risks result from business decisions that are influenced by changes in markets, liquidity changes and credit risks?
- A. Operational
- B. Financial
- C. Technical
- D. Strategic
Answer: B
Explanation:
Explanation
Financial risks are the risks that result from business decisions that are influenced by changes in markets, liquidity, and credit. Financial risks are the uncertainties or variabilities of the financial performance or position of an organization due to factors such as interest rates, exchange rates, inflation, credit ratings, debt levels, or cash flows. Financial risks can affect an organization's profitability, solvency, liquidity, or valuation.
Verified References:
https://www.investopedia.com/terms/f/financialrisk.asphttps://www.thebci.org/training-qualifications/good-pract
NEW QUESTION # 13
A formal "disaster" can only be declared by the firm owners or by the IT Department Manager.
- A. False
- B. True
Answer: A
Explanation:
Explanation
A formal "disaster" can only be declared by the firm owners or by the IT Department Manager. This is false because a formal "disaster" can be declared by any authorized person who has the responsibility and authority to activate the business continuity and disaster recovery plan. The authorized person may vary depending on the type, scope, and severity of the disaster, but it should be clearly defined in the plan who can declare a disaster and under what circumstances. The authorized person should also communicate the declaration of a disaster to all relevant stakeholders, such as employees, customers, suppliers, partners, regulators, media, or the public. Verified References:
https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article/515730/business-continuity-a
NEW QUESTION # 14
Which type of management is an often used term, but has so many different connotations to different people that invariably the message of its meaning gets confused?
- A. Operational
- B. Functional
- C. Technical
- D. Strategic
Answer: D
Explanation:
Explanation
Strategic management is the type of management that is an often used term, but has so many different connotations to different people that invariably the message of its meaning gets confused. Strategic management is the process of defining and executing the long-term vision, goals, plans, and actions of an organization. Strategic management involves analyzing the internal and external environment, formulating strategies, implementing them, and evaluating their outcomes. Strategic management can be complex and challenging, as it requires alignment and integration of various aspects of the organization, such as culture, structure, resources, capabilities, stakeholders, markets, competitors, or regulations. Verified References:
https://www.investopedia.com/terms/s/strategic-management.asp
https://phoenixnap.com/blog/what-is-business-continuity-management
NEW QUESTION # 15
Which type of planning requires the commitment of significant financial and human resources for situations that may never even occur?
- A. Operational
- B. Contingency
- C. Technical
- D. Review
Answer: B
Explanation:
Explanation
Contingency planning is the type of planning that requires the commitment of significant financial and human resources for situations that may never even occur. Contingency planning is the process of developing alternative courses of action in case the preferred plan fails or an unexpected event occurs. Contingency planning aims to reduce the impact and uncertainty of potential disruptions and ensure the continuity of the organization's functions and processes. Contingency planning can be costly and time-consuming, as it involves identifying risks, analyzing scenarios, developing strategies, testing plans, and maintaining readiness.
Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://phoenixnap.com/blog/what-is-business-continuity-mana
NEW QUESTION # 16
What is the frequency of BCP testing for critical processes?
- A. Quarterly
- B. Annually
- C. As per calendar planned at beginning of the year
- D. Half-yearly
Answer: D
Explanation:
Explanation
BCP testing is the process of verifying the effectiveness of a business continuity plan and ensuring that it meets the business objectives and requirements. BCP testing should be conducted regularly to identify any gaps or weaknesses in the plan and to update it accordingly1. While the number of tests to be conducted depends on the industry background, size and complexity, available resources, and BCP maturity levels, it is recommended that the tests are conducted twice a year for critical processes but at least minimum once a year1.
NEW QUESTION # 17
Which system in place enables you to balance risk and entrepreneurial energy with appropriate internal control procedures to manage that risk?
- A. Corporate Governance
- B. Banking System
- C. Quality Management System
- D. Auditing Report
Answer: A
Explanation:
Explanation
Corporate governance is the system of rules, practices, and processes by which an organization is directed and controlled. It involves balancing the interests of various stakeholders, such as shareholders, management, customers, suppliers, regulators, and the community. It also enables an organization to balance risk and entrepreneurial energy with appropriate internal control procedures to manage that risk. Effective corporate governance can enhance performance, accountability, transparency, and trust. Verified References:
https://www.investopedia.com/terms/c/corporategovernance.asphttps://www.thebci.org/training-qualifications/go
NEW QUESTION # 18
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick.
- A. True
- B. False
Answer: A
Explanation:
Explanation
A disaster can also be declared for an illness pandemic where a significant portion of employees are sick. This is true because an illness pandemic is a type of natural disaster that can affect an organization's ability to continue its normal operations. An illness pandemic can cause absenteeism, reduced productivity, increased costs, supply chain disruptions, customer dissatisfaction, or regulatory compliance issues. Therefore, an organization may need to declare a disaster and activate its business continuity and disaster recovery plan if an illness pandemic impacts its critical functions and processes beyond an acceptable level. Verified References:
https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article/515730/business-continuity-a
NEW QUESTION # 19
Which register maintains information on all the identified risks relating to an organization?
- A. Crisis register
- B. Risk register
- C. Memory Data Register
- D. Index register
Answer: B
Explanation:
Explanation
A risk register is a register that maintains information on all the identified risks relating to an organization. A risk register is a document or a tool that records and tracks the details of each risk, such as its description, source, impact, likelihood, rating, owner, status, response strategy, action plan, and monitoring method. A risk register is a useful tool for managing risks and communicating them to stakeholders. Verified References:
https://www.investopedia.com/terms/r/risk-register.asphttps://www.thebci.org/training-qualifications/good-pract
NEW QUESTION # 20
Which certification centre provides the physical infrastructure?
- A. Service
- B. Facility
Answer: B
Explanation:
Explanation
A facility certification center is a center that provides the physical infrastructure for testing and certifying the functionality and performance of products, systems, or services. A facility certification center may have specialized equipment, tools, environments, or standards that can simulate real-world conditions or scenarios.
A facility certification center may also have qualified staff, experts, or auditors who can conduct the testing and certification process. Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://www.cisco.com/c/en/us/solutions/hybrid-work/what-is-
NEW QUESTION # 21
Risk ownership must be clearly set out, documented and agreed with the individual owners at all levels of the operational risk management process.
- A. True
- B. False
Answer: A
Explanation:
Explanation
Risk ownership must be clearly set out, documented and agreed with the individual owners at all levels of the operational risk management process. This is true because risk ownership is oneof the key principles of business continuity management. Risk ownership means that each risk has a designated person who is responsible and accountable for its identification, assessment, treatment, monitoring, and reporting. Risk owners should have the authority and resources to manage their risks effectively and efficiently. Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://www.thebci.org/training-qualifications/good-practice-g
NEW QUESTION # 22
Which statement is authorized at an appropriate level and should codify the company's attitude to a particular risk?
- A. Privacy Statement
- B. Policy Statement
- C. QMS Document
- D. Process Document
Answer: B
Explanation:
Explanation
A policy statement is a statement that is authorized at an appropriate level and should codify the company's attitude to a particular risk. A policy statement is a document that defines the scope, objectives, principles, roles, and responsibilities of a business continuity management program. It should also express the organization's commitment to managing risks and ensuring continuity of its critical functions and processes. A policy statement should be approved by senior management and communicated to all relevant stakeholders.
Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://phoenixnap.com/blog/what-is-business-continuity-mana
NEW QUESTION # 23
Risks are diverse and arise from both external and internal sources.
- A. True
- B. False
Answer: A
Explanation:
Explanation
Risks are diverse and arise from both external and internal sources. This is true because risks are uncertainties that can have positive or negative effects on an organization's objectives. Risks can arise from various sources that are either outside or inside the organization's control. External sources of risk include natural disasters, cyberattacks, market fluctuations, customer preferences, competition, regulation, or political instability.
Internal sources of risk include human error, fraud, system failure, process inefficiency, organizational culture, or strategic decisions. Verified References:
https://www.investopedia.com/terms/b/businessrisk.asphttps://www.thebci.org/training-qualifications/good-pract
NEW QUESTION # 24
In the event of a disaster that destroys the physical office site operations will be relocated to a temporary site.
- A. True
- B. False
Answer: A
Explanation:
Explanation
In the event of a disaster that destroys the physical office site operations will be relocated to a temporary site.
This is true because one of the recovery strategies for a disaster is to have an alternate site where the critical functions and processes can be resumed until the primary site is restored or replaced. The alternate site can be a pre-arranged location, such as a rented office space, a hotel, or another branch of the same organization, or a mobile facility, such as a trailer or a container. The alternate site should have the necessary equipment, systems, data, and resources to support the continuity of the business. Verified References:
https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article/515730/business-continuity-a
NEW QUESTION # 25
Which of the following can threats be considered? (Choose three)
- A. Supply chain failure
- B. Water
- C. Technology failure
- D. Fire
- E. Operational failure
Answer: B,C,D
Explanation:
Explanation
Threats can be considered any events or situations that can cause harm or disruption to an organization's functions or processes. Threats can be natural, human-made, or technological in origin. Some examples of threats are water (such as floods, leaks, or spills), technology failure (such as system crashes, cyberattacks, or power outages), and fire (such as arson, accidents, or explosions). Verified References:
https://www.iso.org/publication/PUB100442.htmlhttps://phoenixnap.com/blog/what-is-business-continuity-mana
NEW QUESTION # 26
A disaster lasting longer than seventy-two (72) hours requires implementation of which of the following:
- A. Business Continuity and Disaster Recovery Plan
- B. Short Term Business Continuity Plan
Answer: A
Explanation:
Explanation
A disaster lasting longer than seventy-two (72) hours requires implementation of a business continuity and disaster recovery plan. A business continuity and disaster recovery plan is a comprehensive document that outlines how an organization will respond to and recover from a disaster that disrupts its normal operations. It covers both the IT aspects (disaster recovery) and the business aspects (business continuity) of restoring the critical functions and processes within an acceptable time frame. A disaster lasting longer than seventy-two (72) hours is likely to have significant impacts on the organization's performance, reputation, assets, and stakeholders, and therefore requires a coordinated and structured approach to ensure its survival and resilience.
Verified References:
https://www.ready.gov/business-continuity-planhttps://www.csoonline.com/article/515730/business-continuity-a
NEW QUESTION # 27
Which control mechanism is the process by which an organization reduces the likelihood of a risk event occurring or mitigates the effects should it occur?
- A. Risk collision
- B. Risk control
- C. Risk variation
- D. Risk avoidance
Answer: B
Explanation:
Explanation
Risk control is the control mechanism that is the process by which an organization reduces the likelihood of a risk event occurring or mitigates the effects should it occur. Risk control is the process of implementing measures or actions to modify or influence the risk level of an organization. Risk control can involve various strategies, such as avoidance, reduction, transfer, sharing, retention, or acceptance. Risk control can help to improve the organization's resilience and performance. Verified References:
https://www.investopedia.com/terms/r/risk-control.asphttps://www.thebci.org/training-qualifications/good-practi
NEW QUESTION # 28
......
CBCP-002 exam dumps with real GAQM questions and answers: https://www.passtorrent.com/CBCP-002-latest-torrent.html
Today Updated CBCP-002 Exam Dumps Actual Questions: https://drive.google.com/open?id=18fOpwvOva2Bjea0rCrra5f5QTt51EsLC