nerdexam
GIAC

GCFA · Question #177

Which of the following statements best describes the consequences of the disaster recovery plan test?

The correct answer is D. If no deficiencies were found during the test, then the test was probably flawed. A disaster recovery plan test that finds zero deficiencies almost certainly reflects an inadequate test, not a flawless plan, because all real-world plans contain gaps that a rigorous test should uncover.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following statements best describes the consequences of the disaster recovery plan test?

Options

  • AIf no deficiencies were found during the test, then the plan is probably perfect.
  • BThe results of the test should be kept secret.
  • CThe plan should not be changed no matter what the results of the test would be.
  • DIf no deficiencies were found during the test, then the test was probably flawed.

How the community answered

(39 responses)
  • A
    5% (2)
  • B
    8% (3)
  • C
    13% (5)
  • D
    74% (29)

Why each option

A disaster recovery plan test that finds zero deficiencies almost certainly reflects an inadequate test, not a flawless plan, because all real-world plans contain gaps that a rigorous test should uncover.

AIf no deficiencies were found during the test, then the plan is probably perfect.

A zero-deficiency result does not confirm plan perfection; it is far more likely a sign the test lacked breadth or realism rather than evidence that all failure modes were covered.

BThe results of the test should be kept secret.

Test results must be documented and shared with relevant stakeholders so that identified gaps can be addressed and lessons learned are incorporated into plan revisions.

CThe plan should not be changed no matter what the results of the test would be.

The entire purpose of testing is to discover deficiencies and drive plan updates; refusing to modify the plan regardless of results renders the testing process meaningless.

DIf no deficiencies were found during the test, then the test was probably flawed.Correct

Complex IT environments always carry risk of undiscovered gaps in a DR plan; if a test finds no deficiencies, the most probable explanation is that the test scenarios were too narrow, too scripted, or insufficiently challenging to expose those gaps. A well-designed test deliberately stresses the plan under realistic conditions, and such conditions almost always reveal at least minor weaknesses. Treating a clean result as evidence of plan quality rather than test inadequacy leads to false confidence.

Concept tested: Disaster recovery plan testing and continuous improvement

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#disaster recovery#DRP testing#incident response planning#test evaluation

Community Discussion

No community discussion yet for this question.

Full GCFA Practice