A company has a BCP that is tested annually, but the tests consistently reveal the same issues each year. The team updates the plan after each test, but the same problems recur. What is the most likely reason the issues persist?

The test results are not being documented

The updates are not being implemented effectively

The plan is not being tested frequently enough

A retail company is creating a test plan for its BCP. The plan must validate that the point-of-sale system can be recovered within 4 hours. Which test objective is most aligned with this requirement?

Verify that the backup tapes are stored offsite

Ensure the point-of-sale system is recovered within 4 hours

Test the communication plan for notifying employees

Confirm that the alternate site has sufficient power

A logistics company wants to determine its resiliency capability for its package tracking system. The system has redundant servers in two data centers, but the database is only in one location. What does this indicate about the system's resiliency?

The system is not resilient at all because it has any single point of failure

The system's resiliency cannot be determined without a full test

The system is fully resilient because the servers are redundant

The system has a single point of failure at the database

Which activity is a key part of executing a contingency plan test?

Archiving the test results without review

Writing the contingency plan from scratch

Conducting the test according to the test plan and documenting observations

Approving the final budget for the test

A company conducts an annual BCP test, but the plan has not been updated in two years. The test reveals several outdated contact numbers and a new critical application that is not covered. What should the company do to establish a continuous improvement cycle?

Update the plan immediately and schedule a review after each test

Only update the contact numbers and ignore the new application

Archive the current plan and start over from scratch

Conduct another test next month to see if the issues persist

Information Systems Security Management Professional

Domain 5Objective 3

5.3 Maintain Contingency Plan, Resiliency Plan (e.g., Continuity of Operations Plan (COOP)), Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) ISSMP Practice Questions (Page 3)

Part of the Contingency Management domain, which accounts for 12% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

10concepts

12%of the exam

10 Concepts in This Objective

Contingency plan testing types
Test plan development
Test execution and evaluation
Plan modification based on test results
Survivability assessment
Resiliency capability determination
Resiliency metrics and thresholds
Plan update process management
Change management integration
Continuous improvement of plans

Questions 11–15

11expert · hard
A company has a BCP that is tested annually, but the tests consistently reveal the same issues each year. The team updates the plan after each test, but the same problems recur. What is the most likely reason the issues persist?
Select an answer first
12application · medium
A retail company is creating a test plan for its BCP. The plan must validate that the point-of-sale system can be recovered within 4 hours. Which test objective is most aligned with this requirement?
Select an answer first
13application · medium
A logistics company wants to determine its resiliency capability for its package tracking system. The system has redundant servers in two data centers, but the database is only in one location. What does this indicate about the system's resiliency?
Select an answer first
14foundation · easy
Which activity is a key part of executing a contingency plan test?
Select an answer first
15application · medium
A company conducts an annual BCP test, but the plan has not been updated in two years. The test reveals several outdated contact numbers and a new critical application that is not covered. What should the company do to establish a continuous improvement cycle?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.