A mid-sized insurance company has a recovery time objective (RTO) of 8 hours and a recovery point objective (RPO) of 24 hours. The company has a limited budget and wants to minimize ongoing recovery infrastructure costs. Which recovery strategy is most appropriate?

A hot site with synchronous replication

A cold site with daily tape backups

A reciprocal agreement with another insurance company

A law firm must retain client case files for 7 years and be able to restore them within 24 hours if the primary office is destroyed. The firm has a limited budget and does not want to manage its own tape media. Which backup storage strategy best satisfies the retention and recovery requirements?

Use a cloud backup service with versioning and a 7-year retention policy

Store backups on a local NAS device in the same office

Send tapes to a commercial offsite vault monthly

Replicate the NAS to a second office 10 miles away

A hospital's patient-monitoring system must continue operating even if one server's power supply fails or a network switch port goes down. The system uses RAID 1 for its storage. Which additional mechanism is most directly needed to address the specific failures described?

A second RAID controller in the server

An uninterruptible power supply (UPS) for the server room

A second server in an active-passive cluster

Redundant power supplies and redundant network paths

A payment processing system is designed with redundant power supplies, RAID 10 storage, and clustered application servers. During a scheduled maintenance window, an administrator accidentally unplugs the wrong power cord, causing the entire system to shut down. Which design principle was violated?

Single point of failure analysis

Which backup storage strategy provides the best protection against a regional disaster that destroys the primary facility?

Keeping backup tapes in a fireproof safe at the primary facility

Using a network-attached storage (NAS) device in the same building as the primary servers

Storing backups at an offsite facility in a different geographic region

Storing backups in a cloud region located in the same metropolitan area as the primary site

Certified Information Systems Security Professional

Domain 7Objective 10

7.10 - Implement Recovery Strategies CISSP Practice Questions (Page 4)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

13%of the exam

Questions 16–20

16expert · hard
A mid-sized insurance company has a recovery time objective (RTO) of 8 hours and a recovery point objective (RPO) of 24 hours. The company has a limited budget and wants to minimize ongoing recovery infrastructure costs. Which recovery strategy is most appropriate?
Select an answer first
17application · medium
A law firm must retain client case files for 7 years and be able to restore them within 24 hours if the primary office is destroyed. The firm has a limited budget and does not want to manage its own tape media. Which backup storage strategy best satisfies the retention and recovery requirements?
Select an answer first
18application · medium
A hospital's patient-monitoring system must continue operating even if one server's power supply fails or a network switch port goes down. The system uses RAID 1 for its storage. Which additional mechanism is most directly needed to address the specific failures described?
Select an answer first
19expert · hard
A payment processing system is designed with redundant power supplies, RAID 10 storage, and clustered application servers. During a scheduled maintenance window, an administrator accidentally unplugs the wrong power cord, causing the entire system to shut down. Which design principle was violated?
Select an answer first
20foundation · easy
Which backup storage strategy provides the best protection against a regional disaster that destroys the primary facility?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.