nerdexam
(ISC)2

CSSLP · Question #248

Which of the following plans is documented and organized for emergency response, backup operations, and recovery maintained by an activity as part of its security program that will ensure the…

The correct answer is C. Contingency Plan. A Contingency Plan is a documented strategy to ensure the availability of critical resources and the continuity of operations during an emergency.

Secure Software Deployment, Operations, Maintenance

Question

Which of the following plans is documented and organized for emergency response, backup operations, and recovery maintained by an activity as part of its security program that will ensure the availability of critical resources and facilitates the continuity of operations in an emergency situation?

Options

  • AContinuity Of Operations Plan
  • BBusiness Continuity Plan
  • CContingency Plan
  • DDisaster Recovery Plan

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    88% (30)
  • D
    3% (1)

Why each option

A Contingency Plan is a documented strategy to ensure the availability of critical resources and the continuity of operations during an emergency.

AContinuity Of Operations Plan

A Continuity Of Operations Plan (COOP) focuses on sustaining an organization's essential functions during and after a disruption, often at an organizational or mission level, rather than specific IT resources.

BBusiness Continuity Plan

A Business Continuity Plan (BCP) is an overarching plan that addresses how an entire organization will continue to operate during and after a disruptive event, including non-IT business functions.

CContingency PlanCorrect

A Contingency Plan (CP) is a comprehensive plan detailing actions to be taken to restore and continue critical IT systems and operations after a disruption. It includes procedures for emergency response, data backup, system recovery, and ensures continuity of operations for specific information systems or applications.

DDisaster Recovery Plan

A Disaster Recovery Plan (DRP) specifically focuses on the recovery of IT systems, applications, and data after a disaster, which is a component of a broader Contingency Plan, but less encompassing than the definition provided.

Concept tested: IT disaster recovery and business continuity planning

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Contingency Planning#Disaster Recovery#Business Continuity#Emergency Response

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice