nerdexam
(ISC)2

CISSP · Question #1243

Which type of disaster recovery plan (DRP) testing carries the MOST operational risk?

The correct answer is A. Cutover. Cutover testing carries the most operational risk because it fully switches production operations to the recovery site, meaning any failure during the test directly impacts live business operations.

Submitted by haruto_sh· Mar 5, 2026Security Operations

Question

Which type of disaster recovery plan (DRP) testing carries the MOST operational risk?

Options

  • ACutover
  • BWalkthrough
  • CTabletop
  • DParallel

How the community answered

(53 responses)
  • A
    87% (46)
  • B
    8% (4)
  • C
    4% (2)
  • D
    2% (1)

Why each option

Cutover testing carries the most operational risk because it fully switches production operations to the recovery site, meaning any failure during the test directly impacts live business operations.

ACutoverCorrect

Cutover (also called full interruption) testing involves actually shutting down primary systems and failing over completely to the disaster recovery environment, meaning the organization runs entirely on the DR site during the test. If the DR site fails or performs inadequately, real business operations are disrupted with no fallback, making it the highest-risk DR test type. This is in contrast to parallel testing, where both environments run simultaneously and production is never fully abandoned.

BWalkthrough

Walkthrough testing (also called a structured walk-through) is a low-risk, paper-based exercise where team members review the DRP document step-by-step to identify gaps, with no systems actually being moved or activated.

CTabletop

Tabletop testing is a discussion-based simulation where stakeholders talk through their response to a hypothetical scenario without touching any live systems, posing no operational risk whatsoever.

DParallel

Parallel testing activates the DR site and runs it simultaneously alongside the production environment, so production operations remain fully intact and unaffected if the DR environment encounters problems, making it significantly lower risk than a cutover.

Concept tested: Disaster recovery plan testing types and operational risk

Source: https://csrc.nist.gov/publications/detail/sp/800-84/final

Topics

#DRP testing#cutover testing#disaster recovery#operational risk

Community Discussion

No community discussion yet for this question.

Full CISSP Practice