nerdexam
Isaca

CISA · Question #268

Which of the following approaches will ensure recovery time objectives (RTOs) are met for an organization's disaster recovery plan (DRP)?

The correct answer is A. Performing a full interruption test. To ensure Recovery Time Objectives (RTOs) are met for a disaster recovery plan (DRP), performing a full interruption test is essential, as it simulates a real outage and measures actual recovery times.

Submitted by parkjh· Apr 18, 2026Information Systems Operations and Business Resilience

Question

Which of the following approaches will ensure recovery time objectives (RTOs) are met for an organization's disaster recovery plan (DRP)?

Options

  • APerforming a full interruption test
  • BPerforming a parallel test
  • CPerforming a tabletop test
  • DPerforming a cyber-resilience test

How the community answered

(53 responses)
  • A
    75% (40)
  • B
    8% (4)
  • C
    4% (2)
  • D
    13% (7)

Why each option

To ensure Recovery Time Objectives (RTOs) are met for a disaster recovery plan (DRP), performing a full interruption test is essential, as it simulates a real outage and measures actual recovery times.

APerforming a full interruption testCorrect

A full interruption test (also known as a full-scale or cutover test) involves completely shutting down the primary system and attempting to recover and resume operations using the disaster recovery site and procedures. This is the most rigorous test, as it validates the actual recovery time against the defined RTOs under real-world conditions, providing concrete evidence of the plan's effectiveness in meeting time-critical objectives.

BPerforming a parallel test

A parallel test runs critical systems at both the primary and recovery sites simultaneously, verifying data synchronization and system functionality without interrupting the primary site, thus not directly measuring RTOs.

CPerforming a tabletop test

A tabletop test (or walkthrough test) involves a discussion-based exercise where participants verbally review the DRP steps, which is good for identifying gaps but does not measure actual recovery times or validate technical processes.

DPerforming a cyber-resilience test

A cyber-resilience test focuses on an organization's ability to withstand and recover from cyberattacks, which is a specific aspect of overall resilience but not specifically designed to measure all DRP RTOs for various types of disasters.

Concept tested: Disaster recovery plan testing types

Topics

#Disaster Recovery Plan (DRP)#Recovery Time Objective (RTO)#DRP Testing#Business Resilience

Community Discussion

No community discussion yet for this question.

Full CISA Practice