Contingency Plan Practice Test

These questions are part of the practice quiz. Start practicing

• How does a tabletop exercise differ from a functional or full-scale exercise, and what is the primary value of tabletop testing?
• What is the purpose of a 'lessons learned' process, and how should it be documented and acted upon?
• What are indicators that a contingency plan may be out of date, and what steps should be taken to refresh it?
• What is the role of governance in contingency planning?
• Contingency plans describe the steps necessary to keep business going during unexpected problems and prevent one or more staff members from performing their usual tasks using automated practice systems.
• Describe the difference between hot, warm, and cold sites in disaster recovery strategies.
• Unscheduled downtime is caused by system or environmental failures.
• What is a Business Impact Analysis (BIA), and what key outputs does it produce that drive continuity planning?
• Describe RTO and RPO and give an example for a critical system.
• What term describes downtime caused by vendor scheduled upgrades not planned by the practice?
• Why is alignment with internal RTOs and RPOs critical when validating vendor DRPs?
• Which of the following is NOT an example of an alternative workflow during downtime?
• True or False: Strategic plans describe the steps necessary to keep business going when unexpected problems occur and prevent staff from performing their usual tasks using automated practice systems.
• What is a hot standby arrangement in disaster recovery terms?
• Which role in ICS is primarily responsible for coordinating with external agencies and stakeholders?
• Which group should receive training on downtime procedures?
• How should data backups be scheduled in relation to RPOs, and which backup types influence restore time?
• Which statement best describes the purpose of downtime drills?
• What do contingency plans describe?
• Describe a typical escalation path during an incident, including triggers and stakeholders involved.
• What is disaster recovery testing versus disaster recovery planning?
• What is the primary difference between a business continuity plan (BCP) and a disaster recovery plan (DRP), and how do their objectives align during a disruption?
• What should be included in access control during disruption to maintain security and enable recovery?
• Which regulatory considerations commonly influence contingency planning in sectors such as finance and healthcare?
• What role does access control play in contingency planning?
• EHR unavailability represents a significant potential patient safety hazard that directly affects patient care.
• As soon as an unplanned downtime is discovered, notifications are sent immediately to?
• Why is timely communication important in incident response?
• How does a BIA feed into risk treatment decisions?
• The SAFER guides are intended to be used for legal compliance purposes.
• Developing a communication template will ensure quick and effective communication.
• Which element is typically included in an incident response plan?
• How can you ensure continuity of critical communications during a power outage?
• Which downtime type includes vendor-scheduled upgrades not planned by the practice?
• Which of the following is NOT a key element of a contingency plan?
• What is the best approach when communicating with customers during a disruption to minimize reputational damage?
• What is the difference between planned downtime and unplanned downtime?
• Organizations need to back up their systems daily. True or False?
• Which of the following is a key element of contingency planning?
• During planned downtime, which activity signals the start of the downtime planning?
• Downtime cannot be planned.
• Which due diligence activities are commonly performed to manage third-party dependencies in a contingency plan?
• What is 'access control during disruption,' and why is it critical for continuity and security?
• What standards are commonly referenced in contingency planning? Name at least two.
• Downtime drills should involve which participants?
• Which phases are included in the Contingency Planning lifecycle?
• What factors typically constitute activation criteria for a contingency plan?
• The Team Worksheet documents the names and roles of the self-assessment team, as well as individual team members' activities.
• Which statement best describes the responsibilities of the contingency coordinator?
• How often should system backups be tested according to contingency planning?
• Planned downtime begins when or near the time dates for downtime are established.
• How should data dependencies be treated within continuity planning, and why is this important?
• What role does the Incident Command System (ICS) play in a contingency plan, and what are typical ICS sections relevant to business continuity?
• Which statement best differentiates contingency planning from incident response and business continuity?
• Why is testing the Disaster Recovery (DR) plan essential?
• Which term defines the maximum acceptable downtime and data loss for an organization after a disruption, guiding contingency measures?
• Which considerations are essential when designing remote work continuity for personnel?
• Which item is not considered a key element of contingency planning?
• In risk management, what best describes residual risk and how should it be addressed in the contingency plan?
• How should you align contingency planning with enterprise risk management?
• Which of the following is NOT part of downtime planning?
• What is the purpose of post-incident reporting?
• Which metric measures how quickly you can recover after an outage?
• Which of the following is a key element of a contingency plan?
• Which action is part of contingency planning for downtime?
• Which statement best describes the relationship between IT recovery objectives and business recovery objectives during a disruption?
• Which of the following is not a primary responsibility of the contingency coordinator?
• Unscheduled downtime is due to which of the following?
• ________ __________ should be controlled and periodically changed to prevent inappropriate access to the data and the system.
• _______ __________ are an effective way to prepare for system downtime and assess staff readiness.
• Contingency planning describes the process put in place to maintain workflows when unexpected problems occur that prevent end users from completing tasks within a system.
• Which practice strengthens supplier contingency readiness?
• The contingency coordinator has authority to invoke contingency processes and communication when a system problem is detected.
• Which of the following best describes the purpose of downtime planning?
• When including cloud services in contingency planning, data residency concerns relate to:
• Which element helps ensure that contingency plans remain usable and authorized over time?
• The SAFER Guide identifies what?
• One person from your practice, along with one alternate, should be assigned the responsibility for contingency coordination in the event of a system problem or failure.
• Downtime is defined as the time during which a functional machine or system is not functioning properly or is unavailable to users.
• What is the purpose of a Crisis Communications Plan within contingency planning?
• Which of the following best describes the scope of contingency planning activities?
• Which option represents a form of communication that can be used to notify staff when downtime is planned?
• Why is data retention in incident logs important for contingency planning?
• Which of the following is a key element of a contingency plan?
• What is the primary purpose of a Business Impact Analysis (BIA) in guiding resource allocation and recovery strategies?
• Which phase in the BCM lifecycle focuses on practicing and improving response capabilities?
• How should continuity plans address cybersecurity risks, including ransomware, within the plan scope?
• How should you document and manage plan versioning, approvals, and access control?
• How should continuity plans address facility disruptions, including evacuation, alternate workspace, and occupancy considerations?
• What is a recovery objective test, and why is it important to validate RTOs and RPOs through testing?
• Which method best validates RTO and RPO?
• Under which scenario would a warm site be preferred over a cold site?
• Why is documentation control essential in contingency planning?
• Which action should be taken during implementation to support contingency planning?
• _____ drills are an effective way to prepare for system downtime and assess staff readiness.
• How can you measure the effectiveness of contingency plan testing?
• Which criteria determine whether to activate the continuity plan for a disruption?
• Which role is typically assigned to coordinate contingency activities?
• Which frequency is recommended for maintaining accurate system backups?
• What is the purpose of a periodic training program for contingency planning?
• What is the importance of post-incident reporting?
• Which statement best describes how critical processes are identified during a Business Impact Analysis (BIA)?
• How do you balance rapid response with deliberate decision-making in the early stages of an incident?
• What are the three plans that need to be included in downtime planning?
• Which site type requires the least amount of ongoing operations and is the slowest to become fully functional?
• Who should be assigned the responsibility for contingency coordination in the event of a system problem or failure?
• Downtime may affect a single application or be system wide. Which term describes this phenomenon?
• When validating recovery plans with third-party vendors, which elements should vendor DRP documentation include?
• The SAFER Guides focus areas include which of the following?
• Which of the following is NOT listed as a key element of a contingency plan?
• How should a contingency plan allocate budget for preparedness activities, and what cost drivers are common?
• Which type of testing confirms that continuity measures for cloud services will work during a disruption?
• Which regulatory area is affected when data residency choices are made for cloud services?
• Which statement best describes the relationship between COOP and BCP?
• Which metric is used to monitor contingency readiness?
• What is meant by minimum viable continuity, and when should it be implemented?
• What is a "lessons learned" repository and why is it used?
• What outputs does a BIA produce that drive the contingency plan?
• During a risk assessment, which technique identifies the probability and impact of each threat on critical processes, and how is it used to prioritize mitigation efforts?
• Clinical applications should be brought back online first after an EHR system goes down.
• Downtime drills are designed to assess staff knowledge by asking staff to explain the plan and their roles.
• What are three examples of alternative workflows for clinical practice in a downtime event?
• What is the purpose of a recovery strategy, and what factors influence selecting a strategy for IT recovery?
• Why is periodic testing of contingency plans important beyond checking compliance?
• Data classification in contingency planning primarily informs which action?
• Which statement best describes how RPO relates to data loss?
• Downtime planning should include which of the following?
• Why is a Business Continuity Plan (BCP) not sufficient without a tested Disaster Recovery (DR) plan?
• Which statement is NOT a typical metric used to monitor contingency readiness?
• The contingency plan recommends assigning how many people to oversee contingency coordination?
• Which item should be conducted at least once a year?
• What is the function of the Team Worksheet?
• What is ICS and how does it integrate with corporate contingency structures?
• Which elements are typically defined by a BCP governance framework?
• How should you approach testing for cyber security incidents within contingency planning?
• What is an After Action Review (AAR) and why is it important?
• What is a key consideration when coordinating with external facilities during a disruption?
• Which area isn't included in the ONC SAFER Guides?
• How should dependencies across people, processes, data, and technology be documented to support continuity planning?
• What is the purpose of a post-incident review, and what key elements should it include?
• What is the primary role of data backup strategies in contingency planning?
• How should change management be handled in contingency documentation?
• Describe a practical approach to mapping critical business processes to IT capabilities to ensure recovery alignment.
• What is an air-gapped backup?
• The SAFER checklist is structured as a quick way to enter and print your __________.
• During unplanned downtime, staff should receive timely and effective information.
• Which approach reduces the risk of a single point of failure?
• Vendors do not need to have well-established back-up and recovery procedures for their EHR applications. True or False?
• What role do training, exercises, and runbooks play in ensuring personnel readiness for contingencies?
• How should exercise schedules be structured for effective contingency testing?
• Data backups for the EMR should be performed weekly.
• Why is document control important in contingency planning, and what artifacts should be versioned and stored securely?
• Which combination is considered an effective downtime notification approach?
• The communication plan should be maintained in both electronic and paper form to increase accessibility.
• What is the purpose of validating restored data against the source during recovery testing?
• What should be included regarding incident logs and forensic readiness in a contingency plan?
• When refreshing a contingency plan, which sequence is typical?
• Which backup type generally requires the most time to restore and why?
• A contingency coordinator's responsibilities include which of the following?
• Explain the difference between a cold site, a warm site, and a hot site, and provide criteria for choosing among them.
• In cloud-based continuity, why is failover to multiple regions recommended?
• What approaches and metrics help incorporate supply chain resilience into contingency planning?
• What regulatory considerations might affect contingency planning for data privacy?
• Three plans to include in downtime planning are: Communication plan, Clinical documentation plan, and Charge capture and coding plan.
• Which of the following is a listed element of contingency planning responsibilities?
• Which element is most directly affected by backup frequency in contingency planning?
• What practices ensure data integrity during recovery?
• What should incident escalation structure include?
• What should be included in an alternate site strategy?
• Which considerations are included for cloud-based continuity strategies, including data backups and service continuity?
• Which of the following are not characteristics of system access?
• Why should you assess vendor DR capabilities in contingency planning?
• What is a communication plan?
• Which activity is typically part of the incident response process to preserve for potential legal or forensic use?
• A downtime communication template answers all of the following questions except?
• Define RTO and RPO and explain how they influence recovery strategy selection for a critical business process.
• Which statement about governance in contingency planning is most accurate?
• What is the role of financial continuity planning, and what specific financial controls should be in contingency planning?
• What is the primary purpose of a risk assessment in contingency planning?
• How should an organization handle supplier and third-party risks in contingency planning?
• Which elements constitute the core components of a communications plan within a contingency program, and who are the primary audiences?
• How should communications to customers be handled during a disruption?
• How often should accurate system backups be maintained to support downtime recovery?
• Downtime policies and procedures should include which elements?
• The SAFER Guides focus areas include which of the following?
• How do you structure a communications matrix in a contingency plan?
• How do you validate an RTO and RPO in practice?
• What is a risk appetite and how does it influence contingency planning?
• How can a disaster recovery site location impact legal and regulatory obligations?
• Which statement accurately reflects how RTO and RPO influence backup frequency and recovery steps?
• Which of the following is a recommended approach to address capital expenditure constraints in a contingency plan?
• What is the relevance of a service level agreement to contingency planning?
• Which governance practices help ensure updates to the contingency plan are implemented consistently across all related documents?
• What is a Business Impact Analysis (BIA) and what outputs does it produce that drive the contingency plan?
• How should you handle training and awareness for contingency plans?
• Which two applications should be the first to be brought back online because they enter patient encounter information?
• How should exercises be evaluated to measure effectiveness?
• Which of the following is NOT a part of contingency planning for electronic health record systems?
• Which phase in the Contingency Planning lifecycle identifies critical processes and vulnerabilities?
• In a communications plan, which element defines how to route issues when initial contacts cannot resolve them?
• How should the plan address third-party dependencies, and what due diligence activities should be performed?
• How should a contingency plan address pandemic scenarios?
• In some frameworks, how do Recovery Plans differ from Continuity Plans?
• Downtime procedure training should be provided to which group?
• What is data classification and why is it important in contingency planning?
• What is the primary objective of a Crisis Communications Plan?
• What is the primary purpose of a downtime communication plan?
• To support system back-up and recovery processes for a health information system, which item should be excluded from the system purchase?
• Who should own the recovery steps when mapping critical business processes to IT capabilities?
• Which activity should be conducted periodically to ensure readiness?
• During contingency planning, why is cross-system data validation after restoration important?
• Which of the following is a valid method to notify staff about planned downtime?
• What is the difference between preventive controls and detective controls in contingency contexts?
• How should you incorporate cloud services into contingency planning?
• How would you approach testing a plan for a multi-site organization with regional offices?
• Phase 1 Safe Health IT recommends which of the following practices?
• Which roles are typically involved in a Business Continuity Plan governance framework?
• Which term describes downtime that occurs due to system or environmental failures?
• Within contingency management, which statement best describes the primary focus of crisis communications compared to operational communications?
• Which role typically exists in an Incident Command System (ICS) within contingency planning?
• What is a single point of failure and how should contingency plans address it?
• When does planned downtime communication begin?
• How can an organization ensure plan maintenance is ongoing and changes are reflected across all relevant documents?
• Which responsibility is typically assigned in contingency planning?
• Which of the following is NOT a recommended practice for Phase 1 - Safe Health IT?
• In IT disaster recovery, what is the difference between replication-based and backup-based recoveries, and when would you choose each?
• What is a tabletop exercise and how does it differ from a live drill?
• All system users should have regular training on downtime procedures.
• In disaster recovery terms, which statement best describes a hot standby arrangement?
• Which of the following is included in the ONC SAFER Guides?
• How would you approach continuity for a multi-site organization?
• What is a 'business continuity management' (BCM) lifecycle, and what are its major phases?
• Which steps help address environmental risks such as natural disasters or utility outages in contingency planning?
• What is the purpose of a post-incident review in contingency planning?
• True or False: There are no planned downtimes.
• A well-developed downtime communication template contributes to quick and effective communication.
• Which of the following are key elements of a contingency plan?
• How should contingency planning be integrated with organizational change management to ensure ongoing relevance?
• How does change management influence contingency plan effectiveness, and what change controls are recommended?
• What is the primary purpose of a runbook in contingency planning?