CISSP-ISSAP · Question #239
Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the…
The correct answer is A. Guarantee the reliability of standby systems through testing and simulation. B. Protect an organization from major computer services failure. C. Minimize the risk to the organization from delays in providing services. A, B, and C are correct because a DRP exists to ensure business continuity: it validates that backup systems actually work (A), shields the organization from catastrophic service outages (B), and reduces downtime-related risk by enabling faster recovery (C). These three…
Question
Della works as a security manager for SoftTech Inc. She is training some of the newly recruited personnel in the field of security management. She is giving a tutorial on DRP. She explains that the major goal of a disaster recovery plan is to provide an organized way to make decisions if a disruptive event occurs and asks for the other objectives of the DRP. If you are among some of the newly recruited personnel in SoftTech Inc, what will be your answer for her question? Each correct answer represents a part of the solution. Choose three.
Options
- AGuarantee the reliability of standby systems through testing and simulation.
- BProtect an organization from major computer services failure.
- CMinimize the risk to the organization from delays in providing services.
- DMaximize the decision-making required by personnel during a disaster.
How the community answered
(24 responses)- A92% (22)
- D8% (2)
Explanation
A, B, and C are correct because a DRP exists to ensure business continuity: it validates that backup systems actually work (A), shields the organization from catastrophic service outages (B), and reduces downtime-related risk by enabling faster recovery (C). These three objectives work together - tested standby systems and protection protocols are the mechanisms by which service delays are minimized.
D is wrong because it states the exact opposite of a DRP's intent. A well-designed disaster recovery plan minimizes the decisions personnel must make under pressure by providing pre-established procedures and clear roles - removing guesswork during a crisis, not adding to it.
Memory tip: Think of DRP as "P.A.T." - Protect systems, Assure standbys work, Trim delays. Any answer suggesting a DRP increases burden or complexity during a disaster is a trap - DRPs exist to reduce chaos, not create it.
Topics
Community Discussion
No community discussion yet for this question.