CISSP-ISSMP · Question #13
Drag and drop the Response management plans to match up with their respective purposes. Answer:
The correct answer is Business continuity plan; Business recovery plan; Continuity of operation plan; Contingency plan; Crisis communication plan; Disaster recovery plan. This question tests knowledge of the distinct purposes of the six core Response Management Plans used in business continuity and disaster recovery planning. Each plan serves a specific scope and phase of incident response.
Question
Exhibit
Answer Area
Drag items
Correct arrangement
- Business continuity plan
- Business recovery plan
- Continuity of operation plan
- Contingency plan
- Crisis communication plan
- Disaster recovery plan
Explanation
This question tests knowledge of the distinct purposes of the six core Response Management Plans used in business continuity and disaster recovery planning. Each plan serves a specific scope and phase of incident response.
Approach. The correct matching hinges on understanding the scope and focus of each plan: (1) Business Continuity Plan - the overarching plan ensuring critical business functions survive a disruption; (2) Business Recovery Plan - focuses on restoring normal business operations after the disruption ends; (3) Continuity of Operation Plan (COOP) - a government/military-oriented plan for maintaining essential functions at alternate sites during an emergency; (4) Contingency Plan - provides alternative courses of action when a primary plan or system fails unexpectedly; (5) Crisis Communication Plan - defines how and what to communicate to stakeholders, media, and employees during a crisis; (6) Disaster Recovery Plan (DRP) - narrowly focused on restoring IT systems, data, and technical infrastructure after a disaster. Knowing these distinctions prevents confusing overlapping terms like BCP vs. BRP vs. DRP, which are common exam traps.
Concept tested. Response Management Plans - distinguishing the purpose and scope of BCP, BRP, COOP, Contingency Plan, Crisis Communication Plan, and DRP (CompTIA Security+ Domain: Incident Response / Business Continuity)
Reference. CompTIA Security+ SY0-701 Exam Objectives - Domain 4: Security Operations / Business Continuity and Disaster Recovery Concepts
Topics
Community Discussion
No community discussion yet for this question.
