nerdexam
(ISC)2

CAP · Question #124

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs

The correct answer is D. Contingency plan. A contingency plan contains specific strategies and actions tailored to particular variances from assumptions, addressing defined security problems or emergencies.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

Options

  • ABusiness continuity plan
  • BContinuity of Operations Plan
  • CDisaster recovery plan
  • DContingency plan

How the community answered

(22 responses)
  • B
    5% (1)
  • C
    5% (1)
  • D
    91% (20)

Why each option

A contingency plan contains specific strategies and actions tailored to particular variances from assumptions, addressing defined security problems or emergencies.

ABusiness continuity plan

A business continuity plan focuses on keeping critical business functions operational during and after a disruption, not on specific variance-to-assumption scenarios.

BContinuity of Operations Plan

A Continuity of Operations Plan (COOP) is focused on ensuring essential government or organizational functions continue during any emergency, not on specific predefined variances.

CDisaster recovery plan

A disaster recovery plan focuses on restoring IT systems and data after a major disaster, not on responding to specific assumption variances or security states.

DContingency planCorrect

A contingency plan is specifically designed to address pre-identified scenarios where assumptions deviate from expectations, triggering a defined security problem or emergency state. It outlines targeted actions and strategies for those specific conditions rather than broad operational continuity. This distinguishes it from general continuity plans, which focus on maintaining operations regardless of the specific triggering event.

Concept tested: Contingency plan definition and scope

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Contingency planning#Recovery plans#Incident response#Risk management

Community Discussion

No community discussion yet for this question.

Full CAP Practice