CBCI 시험 - BCI실제시험문제와 답 - 90문항

Question No : 1

An example of regularly planned ongoing maintenance of the Business Continuity Management System (BCMS) is:

A.Performing a check of backup equipment at the alternate site on a monthly basis
B.Taking corrective actions to revise the Business Continuity plan after an actual incident
C.Examining with department heads the performance of their systems following near misses
D.Making changes to the evacuation procedures after an emergency building evacuation demonstrates the procedures include unexpected risks

정답:
Explanation:
The CBCI 7.0 course highlights that regularly scheduled maintenance activities, such as monthly checks of backup equipment, are essential for ensuring that Business Continuity resources remain operational and ready for use. Such preventative maintenance helps detect failures before incidents occur, supporting system reliability. While corrective actions and reviews following incidents or near misses are important, ongoing, planned maintenance is the proactive foundation of system resilience. Evacuation procedure changes are reactive and part of continual improvement, but routine equipment checks represent essential planned maintenance.
Reference: CBCI 7.0 Study Guide, Module 6: Maintenance and Continual Improvement, pages 140-142.

Question No : 2

An effective response structure includes:

A.Unlimited access to financial resources during a disruption
B.Knowledge of when key suppliers and external stakeholders should be notified and included in the response
C.Flexibility to change policies and procedures during a disruption without consulting top management
D.Personnel in place to assess and measure the performance of responders during a disruption

정답:
Explanation:
According to the CBCI 7.0 course, an effective response structure must incorporate clear protocols for timely notification of key suppliers and external stakeholders. This ensures coordinated response efforts and mitigates cascading impacts. Unlimited financial access is unrealistic and can lead to mismanagement. Changes to policies require governance and cannot be unilaterally made during disruptions. While performance measurement is important, notification protocols are fundamental to structured, controlled, and communicative response efforts.
Reference: CBCI 7.0 Study Guide, Module 2: Response Structures, pages 76-78.

Question No : 3

Which type of review provides an evaluation of the Business Continuity Management System (BCMS) outputs against the requirements or expectations to determine whether Business Continuity is incorporated into every task undertaken through the BCMS?

A.Performance Appraisal
B.Post-incident Review
C.Quality Assurance (QA)
D.External Audit

정답:
Explanation:
The CBCI 7.0 course identifies Quality Assurance (QA) reviews as evaluations that assess whether BCMS processes and outputs meet defined standards and requirements. QA examines whether Business Continuity principles and practices are effectively embedded into organizational tasks and workflows. Unlike performance appraisals (individual focus) or post-incident reviews (event focus), QA provides systematic assurance that Business Continuity is integrated consistently and effectively throughout the BCMS lifecycle. External audits verify compliance but QA focuses on continuous process improvement.
Reference: CBCI 7.0 Study Guide, Module 6: Audit and Review, pages 134-137.

Question No : 4

Consulting stakeholders, conducting a cost-benefit analysis, consulting with internal resources such as risk management and internal audit teams, and horizon scanning are some of the methods that might be used when:

A.Measuring Business Continuity culture
B.Identifying and assigning Business Continuity Management System (BCMS) roles and responsibilities
C.Developing an exercise programme
D.Defining the initial BCMS scope

정답:
Explanation:
Defining the initial scope of a BCMS requires a comprehensive understanding of organizational context, risks, and priorities. The CBCI 7.0 course recommends consulting with stakeholders, leveraging internal expertise (e.g., risk management, audit), performing cost-benefit analyses, and horizon scanning to capture potential future threats and opportunities. These methods ensure that the scope is appropriately focused and realistic, considering business objectives, resource availability, and external environment. This thorough approach lays the foundation for a relevant and effective BCMS.
Reference: CBCI 7.0 Study Guide, Module 1: Scope and Context, pages 27-30.

Question No : 5

Which type of exercise is always carried out in the normal operational environment, alternative premises, or command centres and is designed to include everyone that could be involved in the response if the incident were real?

A.Simulation
B.Discussion-based
C.Scenario
D.Live

정답:
Explanation:
The CBCI 7.0 course describes live exercises as the most comprehensive type of Business Continuity exercise. These are conducted in actual or alternate operational environments, including command centres, to simulate real incident conditions as closely as possible. Live exercises involve all personnel who would participate in an actual incident response, testing systems, processes, communication, and physical infrastructure. Their scope, realism, and inclusiveness help identify practical issues that other exercise types may miss. They require significant resources and planning but provide critical assurance of organizational preparedness under authentic conditions.
Reference: CBCI 7.0 Study Guide, Module 6: Exercising and Validation, pages 120-122.

Question No : 6

Which of the following is a step that would be taken by the Business Continuity professional to support the process to advance an organization from embedding to embracing Business Continuity?

A.Development and adoption of a Business Continuity policy to protect the organization from disruptions
B.Assigning Business Continuity roles and responsibilities across the organization's hierarchy
C.Gaining an understanding of the organization's culture
D.Including funding in the Business Continuity budget to hire a consulting firm to run Business Continuity as a project

정답:
Explanation:
The CBCI 7.0 course identifies gaining an understanding of the organization’s culture as a foundational step in moving from merely embedding Business Continuity practices to fully embracing them. Cultural insights enable targeted interventions that align Business Continuity with existing values, beliefs, and behaviours, enhancing engagement and ownership. Policies and role assignments are important but less effective without cultural alignment. Outsourcing continuity as a project risks detachment from organizational realities. Understanding culture guides effective communication, training, and leadership strategies that foster a pervasive continuity mindset.
Reference: CBCI 7.0 Study Guide, Module 4: Culture and Engagement, pages 66-69.

Question No : 7

Which of the following is a factor to be taken into consideration when developing and using risk assessments?

A.Risk assessments will need to work undertaken during the Business Impact Analysis (BIA) to determine the products, services, and activities that need to be
B.The time that has elapsed since the last assessment of risks in order to maintain its currency
C.Risk assessments are primarily produced as information for regulators and auditors to provide evidence that the organization is monitoring and managing risks
D.Risk assessments are based on estimations of the likelihood and consequences of a risk occurring

정답:
Explanation:
The CBCI 7.0 course explains that risk assessments fundamentally rely on evaluating the likelihood of risk occurrence and the consequences if they materialize. This probabilistic approach enables prioritization and treatment planning. Although risk assessments inform BIAs and regulatory compliance, their primary purpose is to analyze potential risks in terms of impact and probability to guide effective continuity strategies. Currency (timeliness) is important but secondary to the quality of likelihood and consequence evaluations, which form the basis of all risk decisions.
Reference: CBCI 7.0 Study Guide, Module 3: Risk Assessment Fundamentals, pages 48-51.

Question No : 8

Establishing governance arrangements for a Business Continuity Management System (BCMS) is essential in order to:

A.Develop a project risk register and carry out appropriate risk assessments in the workplace
B.Ensure that there is ongoing commitment across all organizational functions and levels
C.Commission research into approaches taken by organizations
D.Enable the Business Continuity professional to establish their authority and issue instructions on the actions that need to be taken

정답:
Explanation:
The CBCI 7.0 course stresses that governance arrangements are key to securing ongoing commitment and support across all levels and functions within an organization. Effective governance structures facilitate leadership involvement, resource allocation, decision-making, and accountability, which are crucial for embedding Business Continuity. While project risk registers and research are valuable tools, and authority is necessary, governance’s primary function is to maintain organization-wide engagement and alignment, ensuring the BCMS is sustained and evolves with business needs.
Reference: CBCI 7.0 Study Guide, Module 1: Governance, pages 22-25.

Question No : 9

When implementing solutions so that they can be deployed to respond to disruption, the Business Continuity professional should:

A.Review and revise the specifications for each solution developed in the design phase prior to launching them
B.Work with the teams who will utilize the solutions to develop any new systems or tools required to enable implementation
C.Allocate implementation to the relevant teams and instruct them to manage the implementation as they see fit and to their own timelines
D.Empower the implementation team to make changes to specifications without referring back to top management

정답:
Explanation:
According to the CBCI 7.0 course, collaborating with the teams who will use the solutions is vital for successful implementation. This cooperative approach ensures that practical considerations, system requirements, and user needs are incorporated early, facilitating smoother integration and operationalization. It also promotes ownership and readiness. Revising specifications alone or delegating implementation without collaboration can lead to misaligned outcomes. Empowering teams to unilaterally change specifications without oversight risks scope creep or misapplication. Structured collaboration balances control and flexibility, ensuring solutions meet both design intent and practical deployment realities.
Reference: CBCI 7.0 Study Guide, Module 5: Implementation and Solutions Deployment, pages 98-101.

Question No : 10

Within the context of risk assessment, the identification of solutions is influenced by a variety of business relevant considerations, including:

A.Delivering performance targets
B.Timely production of quality assurance audit trails
C.Compliance with regulatory requirements
D.Ensuring that communication protocols are observed

정답:
Explanation:
The CBCI 7.0 course highlights that compliance with regulatory requirements is a critical consideration when identifying risk treatment solutions. Regulatory frameworks often impose mandatory controls or guidelines that shape the selection and design of Business Continuity solutions to ensure legal adherence and avoid penalties. While performance targets, audit trails, and communication protocols are important operational elements, they are subordinate to regulatory compliance, which acts as a baseline constraint and influence on continuity planning. Effective risk solutions balance operational effectiveness with mandatory compliance, supporting sustainable and defensible Business Continuity strategies.
Reference: CBCI 7.0 Study Guide, Module 3: Risk Assessment and Treatment, pages 51-54.

Question No : 11

When developing a system to measure Business Continuity culture, it is important to take into account:

A.How to ensure that all personnel are required to respond to the process
B.The aims of the activity and how the information will be collected and assessed
C.The way that the outcomes will inform the design of Business Continuity solutions
D.The need to present the outcomes in a positive way for top management and stakeholders

정답:
Explanation:
According to the CBCI 7.0 course, the primary consideration when developing a system to measure Business Continuity culture is to clearly define the objectives of the measurement activity and establish robust methods for collecting and analyzing relevant data. This includes deciding what aspects of culture to assess (e.g., awareness, attitudes, behaviours), selecting appropriate tools (surveys, interviews, observation), and determining assessment frequency. Accurate data collection and analysis provide meaningful insights that drive improvements and validate cultural initiatives. Presentation style and participation mandates are important but secondary to the integrity and clarity of the measurement process itself.
Reference: CBCI 7.0 Study Guide, Module 4: Measuring Culture, pages 71-73.

Question No : 12

In order to implement appropriate initiatives for influencing personnel to embrace Business Continuity and a Business Continuity culture, the Business Continuity professional should start by:

A.Conducting a Business Impact Analysis (BIA) that can be shared with all personnel
B.Carrying out a gap analysis to identify whether the Business Continuity resumption capabilities meet the Business Continuity needs
C.Estimating the gap between the extent to which Business Continuity is currently embraced in the organization and the desired level at which Business Continuity should be embraced
D.Implementing a communications strategy to share information about the gaps in the organization's current Business Continuity plans

정답:
Explanation:
The CBCI 7.0 course stresses that the initial step in fostering a Business Continuity culture is estimating the gap between the current level of personnel engagement and the desired state of embracement. This assessment identifies areas where awareness, commitment, or understanding are lacking, providing a baseline to tailor targeted initiatives. This gap analysis enables prioritization of interventions, whether training, communication, or leadership engagement, to bridge the cultural divide effectively. While BIAs and communication strategies support broader continuity efforts, assessing cultural gaps is a necessary precursor to driving meaningful behavioural change.
Reference: CBCI 7.0 Study Guide, Module 4: Business Continuity Culture, pages 68-70.

Question No : 13

Strategies to resume business operations following a disruption are based on the outcomes of the:

A.Negotiations with stakeholders regarding their minimum requirements in a disruption
B.Governance structures established for the Business Continuity Management System (BCMS)
C.Analysis of Maximum Tolerable Period of Disruption (MTPD) and Recovery Time Objectives (RTO)
D.Collaborations generated by the organization's Business Continuity culture

정답:
Explanation:
The CBCI 7.0 course clarifies that strategies for resuming operations are developed primarily based on the analysis of the Maximum Tolerable Period of Disruption (MTPD) and the Recovery Time Objectives (RTO). The MTPD defines the maximum duration an activity can be disrupted before causing intolerable impact, while the RTO sets the target time to restore that activity. These recovery parameters provide clear, measurable goals for strategy development, ensuring continuity efforts focus on minimizing downtime and impact. Although stakeholder input and organizational culture influence strategy implementation, the technical parameters of MTPD and RTO form the foundational basis for solutions.
Reference: CBCI 7.0 Study Guide, Module 3: Recovery Objectives, pages 56-59.

Question No : 14

In relation to validation, what is meant by review?

A.The process for assessing the suitability, adequacy, and effectiveness of the Business Continuity Management System (BCMS) and identifying opportunities for improvement
B.The process to ensure that personnel have embraced business continuity and are complying with requirements
C.The ability of an organization to develop business continuity solutions and to train personnel to implement them effectively
D.The process to identify an event that could lead to disruption

정답:
Explanation:
The CBCI 7.0 course explains that review refers to the systematic process of evaluating the BCMS to assess whether it remains suitable, adequate, and effective in meeting organizational needs and objectives. Reviews identify areas for improvement, ensuring continual enhancement of Business Continuity capabilities. This encompasses analysis of internal and external factors, performance data, audit results, and feedback from exercises and incidents. It differs from compliance checks or personnel engagement assessments by focusing on the overall system’s fitness for purpose, promoting proactive adaptation to changing risks and environments.
Reference: CBCI 7.0 Study Guide, Module 6: Audit and Review, pages 135-137.

Question No : 15

When carrying out the Business Impact Analysis (BIA) process, the Business Continuity professional should use a consistent approach to determine priorities of products, services, and activities.
Which of the following is a method that could be used?

A.A gap analysis
B.A risk assessment matrix
C.Pre-defined impact thresholds
D.A standardized risk rating table

정답:
Explanation:
The CBCI 7.0 course details that using pre-defined impact thresholds is an effective and consistent method for prioritizing products, services, and activities during a BIA. These thresholds establish clear criteria for impact levels across various categories, such as financial loss, reputational damage, and regulatory consequences. By applying standardized thresholds, organizations can objectively assess and compare the criticality of different business functions, ensuring that prioritization aligns with organizational risk appetite and strategic objectives. This approach promotes consistency, transparency, and repeatability in BIA processes. While risk matrices and gap analyses are useful tools in risk management, pre-defined impact thresholds directly guide priority-setting within BIAs.
Reference: CBCI 7.0 Study Guide, Module 3: Business Impact Analysis, pages 46-48.

BCI CBCI 시험