Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 9 Question 30 Discussion

Posted by Carmela on May 08, 2022 at 12:06 AM

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

Suggested Answer: D

A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans include specific strategies and

actions to deal with specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also include a

monitoring process and triggers for initiating planned actions.

Answer A is incorrect. Disaster recovery is the process, policies, and procedures related to preparing for recovery or continuation of

technology infrastructure critical to an organization after a natural or human-induced disaster.

Answer B is incorrect. It deals with the plans and procedures that identify and prioritize the critical business functions that must be

preserved.

Answer C is incorrect. It includes the plans and procedures documented that ensure the continuity of critical operations during any

period where normal operations are impossible.


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
11 comments · newest first
RO
Rodrigo 11 months ago
Sounds too vague, how can a plan cover all scenarios?
LA
Laurel 12 months ago
I agree, contingency plans are all about specific actions for variances.
CR
Crista 12 months ago
Wait, are we sure it's not the business continuity plan?
TU
Tuyet 12 months ago
I think it's more about the disaster recovery plan.
AN
Antonio 1 year ago
Definitely a contingency plan!
CH
Cherri 1 year ago
Could it be C? The Continuity of Operations Plan seems to fit, but I'm not confident about the specifics.
BE
Berry 1 year ago
I'm not entirely sure, but I remember something about disaster recovery plans focusing more on IT systems rather than specific variances.
MA
Mariann 1 year ago
I think the answer might be D, the contingency plan, since it deals with specific actions for unexpected issues.
RI
Rikki 1 year ago
I feel like this question is similar to one we practiced about business continuity plans, but I can't recall the exact differences.
VA
Valda 1 year ago
I'm confident I know the answer to this one. Testers are responsible for identifying and documenting defects, so the correct answer is C - "Non-detected defects". The other options don't seem to align with the typical outputs of the testing process.
HO
Hortencia 1 year ago
I definitely remember that creating multiple sites for different platforms is usually not recommended because it complicates updates.
0/2000 characters

Save Cancel