nerdexam
(ISC)2

CISSP-ISSMP · Question #13

Drag and drop the Response management plans to match up with their respective purposes. Answer:

The correct answer is Business continuity plan; Business recovery plan; Continuity of operation plan; Contingency plan; Crisis communication plan; Disaster recovery plan. This question tests knowledge of the distinct purposes of the six core Response Management Plans used in business continuity and disaster recovery planning. Each plan serves a specific scope and phase of incident response.

Security Operations Management

Question

Drag and drop the Response management plans to match up with their respective purposes. Answer:

Exhibit

CISSP-ISSMP question #13 exhibit

Answer Area

Drag items

Disaster recovery planCrisis communication planContingency planContinuity of operation planBusiness recovery planBusiness continuity plan

Correct arrangement

  • Business continuity plan
  • Business recovery plan
  • Continuity of operation plan
  • Contingency plan
  • Crisis communication plan
  • Disaster recovery plan

Explanation

This question tests knowledge of the distinct purposes of the six core Response Management Plans used in business continuity and disaster recovery planning. Each plan serves a specific scope and phase of incident response.

Approach. The correct matching hinges on understanding the scope and focus of each plan: (1) Business Continuity Plan - the overarching plan ensuring critical business functions survive a disruption; (2) Business Recovery Plan - focuses on restoring normal business operations after the disruption ends; (3) Continuity of Operation Plan (COOP) - a government/military-oriented plan for maintaining essential functions at alternate sites during an emergency; (4) Contingency Plan - provides alternative courses of action when a primary plan or system fails unexpectedly; (5) Crisis Communication Plan - defines how and what to communicate to stakeholders, media, and employees during a crisis; (6) Disaster Recovery Plan (DRP) - narrowly focused on restoring IT systems, data, and technical infrastructure after a disaster. Knowing these distinctions prevents confusing overlapping terms like BCP vs. BRP vs. DRP, which are common exam traps.

Concept tested. Response Management Plans - distinguishing the purpose and scope of BCP, BRP, COOP, Contingency Plan, Crisis Communication Plan, and DRP (CompTIA Security+ Domain: Incident Response / Business Continuity)

Reference. CompTIA Security+ SY0-701 Exam Objectives - Domain 4: Security Operations / Business Continuity and Disaster Recovery Concepts

Topics

#Response management plans#Incident response#Disaster recovery#Business continuity

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice