nerdexam
Isaca

CISM · Question #112

Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?

The correct answer is B. Offsite data backups. Offsite data backups are the best way to facilitate recovery of data lost due to a cybersecurity incident, ensuring data availability even if primary systems are compromised or destroyed.

Submitted by saadiq_pk· Apr 18, 2026Information Security Incident Management

Question

Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?

Options

  • ADisaster recovery plan (DRP)
  • BOffsite data backups
  • CEncrypted data drives
  • DRemovable storage media

How the community answered

(39 responses)
  • B
    92% (36)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Offsite data backups are the best way to facilitate recovery of data lost due to a cybersecurity incident, ensuring data availability even if primary systems are compromised or destroyed.

ADisaster recovery plan (DRP)

A Disaster Recovery Plan (DRP) outlines the process for recovery but doesn't inherently contain the data itself; offsite backups are the means for data recovery.

BOffsite data backupsCorrect

Offsite data backups provide a secure and isolated copy of data that can be restored in the event of primary data loss or corruption due to a cybersecurity incident. Storing backups offsite protects them from localized disasters or network-wide compromises, making them a highly reliable source for data recovery and ensuring business continuity.

CEncrypted data drives

Encrypted data drives protect data confidentiality but do not facilitate data recovery if the data itself is lost or corrupted due to an incident.

DRemovable storage media

Removable storage media can be used for backups, but the "offsite" aspect is crucial for resilience against major incidents that could affect local storage.

Concept tested: Data backup for recovery

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf

Topics

#Data Recovery#Backups#Incident Response

Community Discussion

No community discussion yet for this question.

Full CISM Practice