A large enterprise has multiple business units, each with its own IT team. The enterprise is developing a recovery plan for a shared ERP system. The plan must ensure that all business units can continue operations, but each unit has different recovery priorities. Which approach best ensures clear accountability?

Let each business unit manage its own recovery independently

Assign a single recovery coordinator with authority over all business units

Create a committee with representatives from each unit and no single leader

Assign recovery roles only to senior executives

A hospital is updating its recovery plan. The plan must assign a role to activate the backup system, a role to restore patient data, and a role to communicate with emergency services. Which approach ensures that these roles are clearly assigned?

Document each role with the name of the responsible person and a backup

Create a single 'recovery team' role that covers all tasks

Leave roles unassigned until a disaster occurs

Assign roles only to external consultants

A healthcare provider is implementing a recovery strategy that involves a cloud provider and an on-premises backup site. The provider's IT team is small, and the cloud provider requires a 48-hour notice for failover. The provider's RTO is 4 hours. Which implementation approach is most appropriate?

Terminate the cloud provider contract

Accept the 48-hour notice and adjust the RTO

Use the on-premises site as the primary recovery site

Negotiate a faster failover commitment with the cloud provider

A retail company's e-commerce platform has an RTO of 30 minutes and an RPO of 5 minutes. The company has two data centers, but the secondary data center is only 10 miles away. A risk assessment shows that a regional disaster could affect both sites. Which recommendation best addresses the risk?

Accept the risk and rely on the existing secondary site

Increase the RTO to 4 hours and use the existing secondary site

Add a third site in a different geographic region with synchronous replication

Use the existing secondary data center with synchronous replication

Information Systems Security Management Professional

Domain 5Objective 2

5.2 Develop Recovery Strategies ISSMP Practice Questions (Page 6)

Part of the Contingency Management domain, which accounts for 12% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

12%of the exam

Questions 26–29

26expert · hard
A large enterprise has multiple business units, each with its own IT team. The enterprise is developing a recovery plan for a shared ERP system. The plan must ensure that all business units can continue operations, but each unit has different recovery priorities. Which approach best ensures clear accountability?
Select an answer first
27application · medium
A hospital is updating its recovery plan. The plan must assign a role to activate the backup system, a role to restore patient data, and a role to communicate with emergency services. Which approach ensures that these roles are clearly assigned?
Select an answer first
28expert · hard
A healthcare provider is implementing a recovery strategy that involves a cloud provider and an on-premises backup site. The provider's IT team is small, and the cloud provider requires a 48-hour notice for failover. The provider's RTO is 4 hours. Which implementation approach is most appropriate?
Select an answer first
29expert · hard
A retail company's e-commerce platform has an RTO of 30 minutes and an RPO of 5 minutes. The company has two data centers, but the secondary data center is only 10 miles away. A risk assessment shows that a regional disaster could affect both sites. Which recommendation best addresses the risk?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

5.2 Develop Recovery Strategies ISSMP Practice Questions (Page 6)

Questions 26–29

A hospital is updating its recovery plan. The plan must assign a role to activate the backup system, a role to restore patient data, and a role to communicate with emergency services. Which approach ensures that these roles are clearly assigned?

A healthcare provider is implementing a recovery strategy that involves a cloud provider and an on-premises backup site. The provider's IT team is small, and the cloud provider requires a 48-hour notice for failover. The provider's RTO is 4 hours. Which implementation approach is most appropriate?

A retail company's e-commerce platform has an RTO of 30 minutes and an RPO of 5 minutes. The company has two data centers, but the secondary data center is only 10 miles away. A risk assessment shows that a regional disaster could affect both sites. Which recommendation best addresses the risk?

Keep studying — Contingency Management