A company is creating plans to handle a major disruption. They have a disaster recovery plan (DRP) that details the recovery of their IT systems, and they are now developing a business continuity plan (BCP). What is the key difference in scope between the two plans?

The BCP focuses on recovering IT infrastructure, while the DRP focuses on business processes.

The BCP is a subset of the DRP, detailing the technical steps to restore systems.

The BCP covers the entire organization, including non-IT functions, while the DRP focuses on IT system recovery.

The BCP is only used during natural disasters, while the DRP is used for all disruptions.

Which statement correctly distinguishes between backup and archiving?

Backups are kept for long-term retention, while archives are used for operational recovery.

Backups and archives are interchangeable terms for the same process.

Archives are typically stored on the same media as backups and are used for the same purpose.

Backups are used for operational recovery, while archives are used for long-term retention and compliance.

A company is developing a business continuity plan (BCP). They have identified critical business functions, such as order processing and customer support, and the resources needed to maintain them. What is the primary purpose of the BCP in this context?

To ensure compliance with regulatory requirements for data retention.

To provide a detailed technical procedure for restoring IT systems after a disaster.

To document the recovery time objectives for all IT systems.

To ensure the organization can continue critical business functions during a disruption.

What is the primary driver for defining a data retention period?

The amount of storage space available

Legal, regulatory, and business requirements

The preference of the IT department

An e-commerce company is subject to a regulation that requires retaining customer transaction data for 5 years. They currently store all transaction data in a database and take nightly backups. The database is growing rapidly, and the backups are becoming unwieldy. What is the most appropriate action to meet the retention requirement while managing storage growth?

Increase the frequency of full backups to daily and keep them for 5 years.

Implement a data archiving process that moves transaction data older than 1 year to a separate archive store, and retain it for 5 years.

Delete transaction data older than 5 years from the database and keep backups for 5 years.

Store transaction data in a compressed format in the database and keep backups for 5 years.

Certified Secure Software Lifecycle Professional

Domain 7Objective 12

Support Continuity of Operations CSSLP Practice Questions (Page 1)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

11concepts

11%of the exam

Questions 1–5

1application · medium
A company is creating plans to handle a major disruption. They have a disaster recovery plan (DRP) that details the recovery of their IT systems, and they are now developing a business continuity plan (BCP). What is the key difference in scope between the two plans?
Select an answer first
2foundation · easy
Which statement correctly distinguishes between backup and archiving?
Select an answer first
3application · medium
A company is developing a business continuity plan (BCP). They have identified critical business functions, such as order processing and customer support, and the resources needed to maintain them. What is the primary purpose of the BCP in this context?
Select an answer first
4foundation · easy
What is the primary driver for defining a data retention period?
Select an answer first
5application · medium
An e-commerce company is subject to a regulation that requires retaining customer transaction data for 5 years. They currently store all transaction data in a database and take nightly backups. The database is growing rapidly, and the backups are becoming unwieldy. What is the most appropriate action to meet the retention requirement while managing storage growth?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.