Discuss ISC2 CISSP Exam Topic 3 Question 116

What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

ATo ensure Information Technology (IT) staff knows and performs roles assigned to each of them

BTo validate backup sites' effectiveness

CTo find out what does not work and fix it

DTo create a high level DRP awareness among Information Technology (IT) staff

Suggested Answer: C

The main reason for testing a DRP is to identify and correct any gaps, errors, or weaknesses in the plan before a real disaster occurs. Testing a DRP also helps to ensure that the plan is feasible, effective, and aligned with the organization's objectives and requirements. Testing a DRP can also help to train and familiarize the IT staff with their roles and responsibilities in the event of a disaster, but this is not the primary purpose of testing.Reference:CISSP All-in-One Exam Guide, Eighth Edition, Chapter 9: Business Continuity and Disaster Recovery Planning, page 1019;Official (ISC)2 Guide to the CISSP CBK, Fifth Edition, Chapter 8: Security Operations, page 1020.

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Luisa 2 days ago

I feel option D is less critical. Awareness is good, but action is better.

Carri 7 days ago

Yes, but without testing, how do we know if they can perform?

Rasheeda 12 days ago

Option A is important too. Staff must know their roles.

Samira 18 days ago

True, but if we don’t fix what’s broken, backups won’t matter.

Avery 23 days ago

But what about option B? Backup sites need to be effective too.

Sharan 28 days ago

I agree, fixing problems is crucial.

Tina 1 month ago

I think option C is the main reason. We need to identify issues.

Anglea 1 month ago

I lean towards B. Effective backups are essential.

Lili 1 month ago

C covers the most ground. Fixing problems is vital.

Tyra 2 months ago

D is nice for awareness, but not the main reason.

Raina 2 months ago

A is also key. Everyone should know their roles.

Benedict 2 months ago

True, but if we don’t know what’s broken, we can’t fix it.

Karon 2 months ago

But B is important too. Backup sites must work!

Whitley 2 months ago

I agree, fixing issues is crucial.

Chuck 2 months ago

I think option C is the best. We need to know what fails.

Felix 3 months ago

I thought it was all about validating the backup sites, honestly.

Quentin 3 months ago

A is crucial too, can't overlook that!

Vinnie 3 months ago

Wait, are we really saying C is the MAIN reason? Seems off.

Floyd 3 months ago

I think B is just as important, though.

Ruthann 3 months ago

C is definitely the main reason!

Viola 4 months ago

I thought creating awareness among IT staff was key, but now I’m questioning if that’s really the main focus of testing a DRP.

Filiberto 5 months ago

I feel like validating backup sites' effectiveness is crucial, but I’m torn between that and fixing issues, so maybe B or C?

Sarah 5 months ago

I remember practicing a question similar to this, and I think ensuring IT staff knows their roles is important too, but I’m not sure if that’s the main reason.

Makeda 5 months ago

I think the main reason is to find out what doesn't work and fix it, so I’d lean towards option C.

ISC2 CISSP Exam - Topic 3 Question 116 Discussion