CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

By ISC · Question Mode

QuestionQ87

Contingency Management

Which statement best describes the consequences of testing a disaster recovery plan?

  • A If no deficiencies were found during the test, then the test was probably flawed.
  • B The plan should not be changed no matter what the results of the test would be.
  • C The results of the test should be kept secret.
  • D If no deficiencies were found during the test, then the plan is probably perfect.
Explanation

A disaster recovery plan test should rigorously identify weaknesses, gaps, and improvement opportunities. If it reports no deficiencies, the testing approach may have been inadequate or insufficiently challenging; the result does not establish that the plan is flawless.

Community Discussion

No comments yet. Be the first to start the discussion!