CAS-001 · Question #529
The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop exercise. The Chief Information Officer (CIO) wants to determine which additional controls…
The correct answer is D. The ISO is assessing the effect of a simulated downtime involving the telecommunication system. The scenario describes a COOP tabletop exercise simulation focused on VoIP system downtime, and the ISO is reviewing the after-action findings to identify additional risk controls.
Question
The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop exercise. The Chief Information Officer (CIO) wants to determine which additional controls must be implemented to reduce the risk of an extended customer service outage due to the VoIP system being unavailable. Which of the following BEST describes the scenario presented and the document the ISO is reviewing?
Options
- AThe ISO is evaluating the business implications of a recent telephone system failure within the
- BThe ISO is investigating the impact of a possible downtime of the messaging system within the
- CThe ISO is calculating the budget adjustment needed to ensure audio/video system redundancy
- DThe ISO is assessing the effect of a simulated downtime involving the telecommunication system
How the community answered
(23 responses)- A4% (1)
- B9% (2)
- C4% (1)
- D83% (19)
Why each option
The scenario describes a COOP tabletop exercise simulation focused on VoIP system downtime, and the ISO is reviewing the after-action findings to identify additional risk controls.
The scenario involves a tabletop exercise simulation, not an actual telephone system failure, and 'evaluating business implications' does not reflect the risk-reduction and control-identification focus described.
VoIP is a voice/telecommunication technology, not a messaging system, and the exercise was a planned simulation rather than an investigation of a possible real-world event.
The scenario involves assessing risk from a tabletop exercise, not calculating a budget adjustment, and VoIP is not an audio/video conferencing system.
A COOP tabletop exercise is a simulation of a disruptive scenario, not an actual outage, so 'simulated downtime' accurately reflects the nature of the exercise. VoIP (Voice over IP) is a telecommunication system, making 'telecommunication system' the precise and correct descriptor for the technology involved.
Concept tested: COOP tabletop exercise and VoIP classification
Source: https://csrc.nist.gov/glossary/term/continuity_of_operations_plan
Topics
Community Discussion
No community discussion yet for this question.