Chapitre 21
BCP, sécurité physique
et personnel

What is the difference between a BCP and a DRP?

1. They are identical
2. The BCP maintains business functions; the DRP restores IT infrastructure
3. The DRP maintains business functions; the BCP restores IT
4. Both only cover physical security

How often should a business continuity plan be reviewed?

1. Only once, at creation
2. Annually and after any major change
3. Every five years
4. Only after a disaster

An outdated, never-updated continuity plan represents what?

1. Good practice
2. A failure of due care that gives false assurance
3. A cost saving
4. A compliance win

On which analysis is the business continuity plan fundamentally based?

1. The penetration test
2. The business impact analysis (MTD, RTO, RPO)
3. The vulnerability scan
4. The firewall log

Where should the authoritative copy of the continuity plan be kept?

1. Only on the production file server
2. Offline and offsite, accessible even when systems are down
3. In a single employee's email
4. On the primary datacenter that may be affected

What does COOP refer to?

1. A type of firewall
2. Continuity of Operations, ensuring essential operations continue
3. A backup rotation scheme
4. A cloud provider

A CCTV camera that no one monitors primarily functions as what?

1. A preventive control
2. A recording device with limited real-time value
3. A deterrent that stops all intruders
4. A fault-tolerant system

An unauthorized person follows an authorized employee through a secured door. What is this called?

1. Shoulder surfing
2. Tailgating (piggybacking)
3. Phishing
4. Dumpster diving

Which control MOST directly prevents tailgating into a datacenter?

1. A longer password policy
2. A mantrap or turnstile combined with awareness
3. Encryption of data at rest
4. A firewall rule

Which operational control ensures visitors do not roam a facility unaccompanied?

1. Escorts and visitor logs
2. A VPN
3. Full disk encryption
4. A honeypot

Why should employees use burner devices when traveling to high-risk countries?

1. To save money on hardware
2. To limit exposure of corporate data if devices are seized or compromised
3. Because personal phones are faster
4. To avoid using a VPN

What operational assumption should travelers make abroad regarding communications?

1. All networks are fully private
2. Communications may be monitored, and public networks/charging stations may be hostile
3. Encryption is unnecessary
4. Corporate data can be freely stored on the device

During an evacuation drill, which objective is critical for personnel accountability?

1. Counting people at assembly points to know who is out and who is missing
2. Backing up the servers
3. Testing the firewall
4. Rotating the backup tapes

What is the purpose of a duress code?

1. To speed up login
2. To signal that a person is acting under threat, triggering a silent alert without alerting the attacker
3. To encrypt a password
4. To reset a forgotten PIN

A fire breaks out while employees are in the building. What is the overriding priority?

1. Protecting the servers
2. Human life and safe evacuation
3. Preserving the backup tapes
4. Documenting the incident

Which practice keeps the continuity plan aligned with reality after a company reorganization?

1. Ignoring the change until the next disaster
2. Updating the plan following the major change
3. Deleting the old plan
4. Waiting five years

Which communication method is essential during a disaster when normal systems may be down?

1. Corporate email
2. Out-of-band methods such as call trees
3. The production intranet
4. Internal chat only

Why is a silent panic alarm valuable in a robbery scenario?

1. It scares the intruder away loudly
2. It summons help without alerting the attacker, protecting staff
3. It encrypts the cash register
4. It locks all doors immediately

How often should physical access rights to sensitive areas be reviewed?

1. Never
2. Periodically, like logical access reviews
3. Only when an employee leaves
4. Only after a breach

Which awareness message BEST reduces tailgating by well-meaning employees?

1. "Always hold the door for others"
2. "Do not hold secured doors open for people you cannot verify"
3. "Share your badge when asked"
4. "Prop doors open for convenience"

Key management as an operational control includes what?

1. Managing cryptographic keys only
2. Inventorying physical keys and ensuring their return
3. Rotating backup tapes
4. Patching servers

Participating in DR/BC exercises primarily achieves what?

1. Meeting a marketing goal
2. Validating the plan and feeding improvements
3. Replacing the need for backups
4. Eliminating all risk

Which of the following is a personnel safety control rather than a data control?

1. Full disk encryption
2. Evacuation drills and assembly-point head counts
3. A firewall rule
4. A password policy

Who is ultimately accountable for maintaining an up-to-date continuity plan?

1. The night-shift guard
2. Senior management
3. Each individual user
4. The external auditor

A scenario offers one option that protects employees and another that protects the servers. Which should be chosen?

1. The option protecting the servers
2. The option protecting employees
3. Neither
4. The cheapest option