Free PECB ISO 22301 Foundation Practice Questions

Sample Practice Questions

Try these 10 sample questions from the PECB ISO 22301 Foundation practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1A small consultancy wants to establish a business continuity plan. Which statement about its size is consistent with ISO's stated audience for ISO 22301?

   1. A.Its size alone does not prevent application of the standard.Correct answer: A
   2. B.Its size requires a service-management system instead of a BCMS.
   3. C.Its size restricts application to supplier continuity arrangements.
   4. D.Its size restricts application to information technology recovery.

   Explanation: The source states, “Organizations of all sizes seeking to establish a robust business continuity plan.” The stated audience includes all sizes. Size does not mandate a different discipline or confine continuity to suppliers or IT.

   Reference: ISO 22301:2019 — official standard description — FAQ, Who should use ISO 22301?

2. 2An implementer is distinguishing obligations from recommendations in ISO 22301. Which interpretation is correct?

   1. A.Shall expresses a recommendation; should expresses a requirement.
   2. B.Shall expresses a requirement; should expresses a recommendation.Correct answer: B
   3. C.May expresses a requirement; can expresses a recommendation.
   4. D.Should and may both express requirements.

   Explanation: The source states, ““shall” indicates a requirement;” The standard assigns requirement force to shall and recommendation force to should; permission and capability are different concepts.

   Reference: ISO 22301:2019 — ANSI official preview — p. viii, verbal forms

3. 3An organization implements ISO 22301 and wants to demonstrate conformity without commissioning external certification. Which route is expressly recognized by the standard?

   1. A.A self-determination and self-declaration of conformityCorrect answer: A
   2. B.A certificate for the recovery supplier's own management system
   3. C.An insurance contract covering the cost of a disruption
   4. D.A test report showing that a single recovery server restarted

   Explanation: The source states, “making a self-determination and self-declaration; or” Self-declaration is expressly recognized. Supplier certification addresses another organization; insurance transfers financial exposure; a component test does not demonstrate system-wide conformity.

   Reference: ISO 22301:2019 — ANSI official preview — p. viii, 0.5, demonstration of conformity

4. 4A paragraph is marked NOTE beside a requirement. How should an implementer use it?

   1. A.As a separate requirement overriding the clause
   2. B.As permission to disregard the requirement
   3. C.As guidance for understanding or clarifying the requirementCorrect answer: C
   4. D.As evidence that the requirement is optional

   Explanation: The source states, “Information marked as “NOTE” is for guidance in understanding or clarifying the associated requirement.” A NOTE helps interpret the associated requirement. It does not itself override, waive or convert that requirement into an option.

   Reference: ISO 22301:2019 — ANSI official preview — p. viii, NOTE

5. 5A team plans to integrate its BCMS with an environmental management system. What does ISO 22301 say about requirements specific to the other management system?

   1. A.They are included in ISO 22301 whenever the systems are integrated.
   2. B.They are replaced by the BCMS's operational requirements.
   3. C.They are not included in ISO 22301, although system elements may be aligned.Correct answer: C
   4. D.They become applicable only after the BCMS obtains external certification.

   Explanation: ISO states, “This document does not include requirements specific to other management systems, though its elements can be aligned or integrated with those of other management systems.” Alignment does not import, replace or condition the other system’s requirements on BCMS certification.

   Reference: ISO 22301:2019 — ANSI official preview — p. viii, 0.5, boundaries of requirements

6. 6A reader assumes notes to entry in the terminology clause can never affect use of a term. What does the standard say?

   1. A.They may contain provisions about using the term.Correct answer: A
   2. B.They always function as dated normative references.
   3. C.They override all operative requirements independently.
   4. D.They apply only if a certification body adopts them.

   Explanation: The source states, ““Notes to entry” used in Clause 3 provide additional information that supplements the terminological data and can contain provisions relating to the use of a term.” Notes to entry supplement terminology and may contain usage provisions. They are not reference-edition rules, universal overrides or subject to certification-body adoption.

   Reference: ISO 22301:2019 — ANSI official preview — p. viii, Notes to entry

7. 7A continuity team sets the target time for restoring a disrupted service. Which term identifies that target?

   1. A.Recovery Point Objective
   2. B.Minimum Business Continuity Objective
   3. C.Maximum Tolerable Period of Disruption
   4. D.Recovery Time ObjectiveCorrect answer: D

   Explanation: PECB states, “The RTO is the targeted time period in which the organization’s disrupted services are expected to be restored.” RTO therefore matches restoration time. RPO concerns acceptable data loss, MBCO concerns service level, and MTPD concerns the disruption boundary before critical consequences.

   Reference: PECB — Key Definitions Used in ISO 22301 and ISO 22313 — Recovery Time Objective (RTO)

8. 8How should an organization apply a dated normative reference under ISO 22301's reference convention?

   1. A.Always substitute the newest edition, including amendments.
   2. B.Use the edition cited rather than automatically substituting a later edition.Correct answer: B
   3. C.Treat the reference as optional reading.
   4. D.Apply only editions issued after the certification date.

   Explanation: The source states, “For dated references, only the edition cited applies.” A dated reference pins the cited edition. The latest-edition rule applies to undated references, not every reference; certification dates do not control that convention.

   Reference: ISO 22301:2019 — official publicly available text — Clause 2, Normative references

9. 9An RPO permits loss of no more than 100 transaction records. Exactly 1,000 records existed before a disruption, and 940 are recovered intact. Which assessment correctly applies the RPO to these counts?

   1. A.The RPO is met because 60 records were lost.Correct answer: A
   2. B.The RPO is exceeded because 940 records were lost.
   3. C.The RPO is met because 40 records were lost.
   4. D.The RPO is exceeded because 1,000 records were lost.

   Explanation: PECB defines RPO as “the maximum acceptable amount of data that can be lost during a disruption period.” Lost records = records existing − records recovered = 1,000 − 940 = 60 records. Since 60 ≤ 100, the stated RPO is met. The 940-record option mistakes recovered records for lost records. The 40-record option computes the unused loss allowance, 100 − 60, rather than the loss. The 1,000-record option ignores all recovered records.

   Reference: PECB — Key Definitions Used in ISO 22301 and ISO 22313 — Recovery Point Objective (RPO)

10. 10Where a term is defined both in ISO 22301:2019 and ISO 22300:2018, which definition does ISO 22301 direct its reader to use?

    1. A.The definition agreed between auditor and auditee
    2. B.The definition in the earlier vocabulary document
    3. C.The definition associated with the wider certification scope
    4. D.The definition given in ISO 22301Correct answer: D

    Explanation: The source states, “The terms and definitions given below supersede those given in ISO 22300:2018.” The express supersession instruction controls. Agreement, age and certification scope do not override it.

    Reference: ISO 22301:2019 — official publicly available text — Clause 3, introductory NOTE