What is the primary goal of system resilience?

To reduce the cost of IT infrastructure

To recover data after a disaster

To prevent all failures from occurring

To maintain critical operations during disruptions

A hospital's electronic health record (EHR) system must achieve 99.99% availability. The system currently runs on a single server with RAID 1 storage and a single network connection. The budget allows for either (a) adding a second server in an active-passive cluster, or (b) adding redundant power supplies, redundant network paths, and a second RAID controller. Which option is the better choice to meet the availability target?

Both options are needed to meet 99.99% availability

Option (b), because component redundancy is cheaper and addresses the most common failures

Neither option is needed because RAID 1 already provides sufficient redundancy

Option (a), because it addresses whole-server failure, which is the most likely single point of failure

What is a key characteristic of a reciprocal agreement as a recovery site strategy?

It relies on another organization's spare capacity to host your operations during a disaster

It is a contractual arrangement with a third-party vendor that provides dedicated recovery infrastructure

It guarantees that the other organization will have sufficient capacity to handle your workload

It is a government-mandated requirement for all critical infrastructure organizations

What is a primary advantage of using cloud-based backup storage compared to maintaining an offsite tape vault?

Cloud backups are always stored on immutable media

Cloud backups are automatically immune to ransomware attacks

Cloud backups provide on-demand access to data without physical retrieval time

Cloud backups eliminate the need for any data encryption

A financial regulator requires a bank to recover its trading system within 2 hours of a disaster and lose no more than 5 minutes of transactions. The bank's primary data center is in New York. Which combination of recovery site and backup strategy best meets both the RTO and RPO?

A warm site in New Jersey with hourly log shipping

A reciprocal agreement with a bank in Chicago using nightly backups

A hot site in Pennsylvania with synchronous replication

A cold site in New Jersey with daily tape backups shipped offsite

Certified Information Systems Security Professional

Domain 7Objective 10

7.10 - Implement Recovery Strategies CISSP Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

13%of the exam

Questions 6–10

6foundation · easy
What is the primary goal of system resilience?
Select an answer first
7expert · hard
A hospital's electronic health record (EHR) system must achieve 99.99% availability. The system currently runs on a single server with RAID 1 storage and a single network connection. The budget allows for either (a) adding a second server in an active-passive cluster, or (b) adding redundant power supplies, redundant network paths, and a second RAID controller. Which option is the better choice to meet the availability target?
Select an answer first
8foundation · easy
What is a key characteristic of a reciprocal agreement as a recovery site strategy?
Select an answer first
9foundation · easy
What is a primary advantage of using cloud-based backup storage compared to maintaining an offsite tape vault?
Select an answer first
10expert · hard
A financial regulator requires a bank to recover its trading system within 2 hours of a disaster and lose no more than 5 minutes of transactions. The bank's primary data center is in New York. Which combination of recovery site and backup strategy best meets both the RTO and RPO?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.