CISA · Question #268
Which of the following approaches will ensure recovery time objectives (RTOs) are met for an organization's disaster recovery plan (DRP)?
The correct answer is A. Performing a full interruption test. To ensure Recovery Time Objectives (RTOs) are met for a disaster recovery plan (DRP), performing a full interruption test is essential, as it simulates a real outage and measures actual recovery times.
Question
Which of the following approaches will ensure recovery time objectives (RTOs) are met for an organization's disaster recovery plan (DRP)?
Options
- APerforming a full interruption test
- BPerforming a parallel test
- CPerforming a tabletop test
- DPerforming a cyber-resilience test
How the community answered
(53 responses)- A75% (40)
- B8% (4)
- C4% (2)
- D13% (7)
Why each option
To ensure Recovery Time Objectives (RTOs) are met for a disaster recovery plan (DRP), performing a full interruption test is essential, as it simulates a real outage and measures actual recovery times.
A full interruption test (also known as a full-scale or cutover test) involves completely shutting down the primary system and attempting to recover and resume operations using the disaster recovery site and procedures. This is the most rigorous test, as it validates the actual recovery time against the defined RTOs under real-world conditions, providing concrete evidence of the plan's effectiveness in meeting time-critical objectives.
A parallel test runs critical systems at both the primary and recovery sites simultaneously, verifying data synchronization and system functionality without interrupting the primary site, thus not directly measuring RTOs.
A tabletop test (or walkthrough test) involves a discussion-based exercise where participants verbally review the DRP steps, which is good for identifying gaps but does not measure actual recovery times or validate technical processes.
A cyber-resilience test focuses on an organization's ability to withstand and recover from cyberattacks, which is a specific aspect of overall resilience but not specifically designed to measure all DRP RTOs for various types of disasters.
Concept tested: Disaster recovery plan testing types
Topics
Community Discussion
No community discussion yet for this question.