Which activity is part of managing the plan update process?

Making changes without documenting them

Communicating changes to all relevant stakeholders

Approving changes by a single individual without review

Keeping changes secret until the next test

A global trading firm has set a resiliency metric that the trading platform must have an RPO of 15 minutes and an RTO of 30 minutes. The current architecture uses synchronous replication to a secondary site, which meets the RPO, but failover takes 45 minutes. The firm is considering two options: (1) invest in automated failover to reduce RTO, or (2) accept the 45-minute RTO and update the metric. Which approach is most appropriate?

Update the RTO to 45 minutes to match current capability

Reduce the RPO to 5 minutes to compensate for the RTO gap

Keep the current RTO but do not invest in improvements

Invest in automated failover to meet the 30-minute RTO

What is the primary purpose of applying lessons learned from contingency plan tests to the plan itself?

To document the test for compliance purposes only

To provide a record of who participated in the test

To ensure the plan remains effective and current

To justify the cost of conducting the test

An e-commerce company wants to assess the survivability of its order processing system. The system depends on a payment gateway, a database, and a notification service. Which approach best assesses survivability?

Ask the IT team to list all hardware they think is important

Test the system only during peak load to see if it crashes

Review the financial statements to determine the company's ability to invest in redundancy

Identify the critical components and their dependencies, then evaluate the impact of losing each

Which factor is most directly considered when determining an organization's resiliency capability?

The organization's recovery time objective (RTO) and recovery point objective (RPO)

The number of employees in the IT department

The organization's marketing budget

The age of the organization's headquarters building

Information Systems Security Management Professional

Domain 5Objective 3

5.3 Maintain Contingency Plan, Resiliency Plan (e.g., Continuity of Operations Plan (COOP)), Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) ISSMP Practice Questions (Page 5)

Part of the Contingency Management domain, which accounts for 12% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

10concepts

12%of the exam

10 Concepts in This Objective

Contingency plan testing types
Test plan development
Test execution and evaluation
Plan modification based on test results
Survivability assessment
Resiliency capability determination
Resiliency metrics and thresholds
Plan update process management
Change management integration
Continuous improvement of plans

Questions 21–25

21foundation · easy
Which activity is part of managing the plan update process?
Select an answer first
22expert · hard
A global trading firm has set a resiliency metric that the trading platform must have an RPO of 15 minutes and an RTO of 30 minutes. The current architecture uses synchronous replication to a secondary site, which meets the RPO, but failover takes 45 minutes. The firm is considering two options: (1) invest in automated failover to reduce RTO, or (2) accept the 45-minute RTO and update the metric. Which approach is most appropriate?
Select an answer first
23foundation · easy
What is the primary purpose of applying lessons learned from contingency plan tests to the plan itself?
Select an answer first
24application · medium
An e-commerce company wants to assess the survivability of its order processing system. The system depends on a payment gateway, a database, and a notification service. Which approach best assesses survivability?
Select an answer first
25foundation · easy
Which factor is most directly considered when determining an organization's resiliency capability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.