ISC Contingency Management — 15 Questions

Question 1

During a disaster recovery simulation for a hybrid cloud environment, you discover that the automated orchestration tool fails to restore dependencies in the correct order because the cloud provider's metadata tags were purged. What is the most effective administrative control to prevent this during a real event?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enforce mandatory tagging policies using AWS Service Control Policies (SCPs) or Azure Policy.. Mandatory tagging policies enforced through AWS Service Control Policies or Azure Policy are preventive administrative controls that block resource creation or modification when required metadata tags are missing. Because the orchestration tool depends on those tags to determine dependency order, enforcing them at the organization/management-group level ensures the metadata cannot be purged or omitted in the first place. This addresses the root cause — missing tags — rather than compensating after failure.

Answer

Increase the RTO buffer time in the Service Level Agreement (SLA).

Answer

Switch from automated restoration to manual snapshot-based restores.

Answer

Implement a manual verification step in the Disaster Recovery Plan (DRP) documentation.

Question 2

An ISSMP is overseeing a BCP program and notes that the current Business Impact Analysis (BIA) is heavily focused on RTO but lacks a critical dependency mapping for cross-functional business processes. Which specific action should the ISSMP prioritize to address the systemic risk of cascading failure during a disaster?

Accepted Answer

Update the BIA to include qualitative impact assessments for all business units.. To address the lack of critical dependency mapping for cross-functional business processes, the ISSMP needs to conduct a comprehensive dependency and interrelationship analysis (often mapped via business process modeling or enterprise architecture frameworks) rather than the SCOR model, which is tailored specifically to supply chain operations.

Answer

Implement a redundant secondary site for all identified Tier 1 applications.

Answer

Initiate a value chain analysis using the SCOR model to identify inter-process dependencies.

Answer

Mandate an immediate increase in the frequency of full-scale BCP simulation exercises.

Question 3

When classifying business processes for BCP, what is the 'Recovery Time Objective' (RTO) most effectively used for?

Accepted Answer

Determining the technology and infrastructure requirements for restoration.. Recovery Time Objective (RTO) defines the maximum acceptable duration of time that a business process can be down after a disaster before severe, unacceptable damage occurs. It is primarily used to determine the maximum tolerable downtime and guide the restoration timeline, whereas option C (data loss tolerance) defines the Recovery Point Objective (RPO). Therefore, the provided correct option and explanation do not accurately reflect standard BCP definitions.

Answer

Identifying the critical staff needed for recovery.

Answer

Assessing the data loss tolerance.

Answer

Calculating the financial impact of the event.

Question 4

An ISSMP is revising the BCP to account for 'Supply Chain Resiliency'. Which approach is best for verifying that critical third-party vendors can meet the organization's recovery requirements?

Accepted Answer

Reviewing vendor-provided Disaster Recovery test reports and performance metrics.. Contractual RTO/RPO requirements must be validated via audit or simulation results.

Answer

Sending a self-assessment questionnaire to the vendor.

Answer

Performing an independent penetration test on the vendor's network.

Answer

Requiring vendors to sign an updated Service Level Agreement.

Question 5

Northwind Health maintains a DR plan that requires a full restore of its primary data center within four hours after a declared disaster. During the annual test, the recovery team restores systems from tape backups, but the last full backup is 26 hours old and the daily incremental backups were never verified. Which element of the contingency planning process has most directly failed to support the stated recovery objective?

Accepted Answer

The recovery point objective is not being met because backup verification and restore testing are inadequate.. A recovery point objective is only meaningful if backups are verified and restorable. Here the team restored successfully but could only recover data up to 26 hours old, and the daily incrementals had never been validated. That means the backup process lacked integrity checking and periodic restore testing, so the achievable recovery point diverged from the planned one. Contingency management requires both recovery time and recovery point objectives to be proven through testing, not assumed from successful backup job logs.

Answer

The disaster declaration authority is not documented in the DR plan.

Answer

The business impact analysis did not identify the maximum tolerable downtime for clinical systems.

Answer

The recovery time objective is too aggressive because tape restore always exceeds four hours.

Question 6

Your organization uses a 'Warm Site' for its disaster recovery strategy. During a recent audit, you find that the site lacks the necessary bandwidth to support peak production traffic. What is the most appropriate management response?

Accepted Answer

Update the DRP to include a 'throttling' policy for non-critical services during failover.. A warm site is a partially equipped recovery facility that requires some configuration and data restoration before it can take over. If the site lacks bandwidth for peak traffic, the pragmatic management response is to update the DRP to define which services get priority bandwidth and which are throttled or deferred during failover. This preserves the warm-site investment, documents the operational constraint, and ensures critical services remain available.

Answer

Cancel the warm site contract and build a cold site.

Answer

Require all employees to work from home during a disaster to save bandwidth.

Answer

Accept the risk formally via the Risk Register without further mitigation.

Question 7

Following a ransomware attack, the organization must decide whether to invoke the DRP or remain in a degraded state while security teams perform forensics. What is the ISSMP's primary responsibility in this decision-making process?

Accepted Answer

Ensuring the decision is documented to align with the organization's risk appetite.. The ISSMP operates at the management and governance layer, not the hands-on technical layer. When deciding between invoking the DRP and staying degraded for forensics, the ISSMP's primary duty is to ensure the decision is made deliberately, documented, and aligned with the organization's stated risk appetite and business priorities. This preserves accountability and provides an auditable rationale for regulators, auditors, and executives.

Answer

Choosing the restore point from the offsite immutable backup.

Answer

Performing the initial forensic image of the infected servers.

Answer

Directing the IT team to disconnect the network immediately.

Question 8

You are auditing a third-party disaster recovery service provider. Which metric provides the most accurate evidence that the provider can meet your organization's required recovery point for a database cluster?

Accepted Answer

Replication Lag monitoring logs showing synchronization latency.. Replication lag directly measures the time delay between a write on the primary database and its application on the replica. Since the recovery point objective (RPO) defines the maximum tolerable data loss measured in time, replication lag is the precise indicator of how much data could be lost in a failover scenario. Monitoring logs provide concrete evidence of actual synchronization latency, making it the most accurate metric for verifying RPO compliance.

Answer

Mean Time to Recovery (MTTR) reports from previous tests.

Answer

Service Level Agreement (SLA) uptime percentages.

Answer

Annual penetration test results.

Question 9

Which document serves as the primary governing authority to define the triggers, escalation paths, and communication roles during a declared crisis event?

Accepted Answer

Crisis Management Plan (CMP). The Crisis Management Plan provides the governance for decision-making during a crisis, whereas the DRP focuses on technical restoration.

Answer

Business Impact Analysis (BIA)

Answer

Standard Operating Procedure (SOP)

Answer

Disaster Recovery Plan (DRP)

Question 10

Which of the following is the most effective method for testing the efficacy of a Business Continuity Plan without disrupting production operations?

Accepted Answer

Tabletop exercise.. A tabletop exercise is a discussion-based simulation that tests plan logic and communication without affecting production systems.

Answer

Parallel processing test.

Answer

Cutover test.

Answer

Full-scale simulation.

Question 11

Your organization has adopted a cloud-native microservices architecture. Which strategy is most appropriate for maintaining business continuity in the event of a regional cloud provider outage?

Accepted Answer

Multi-region active-active deployment with global load balancing.. Multi-region deployment with active-active traffic distribution provides the highest level of resilience for cloud-native apps.

Answer

Cross-region cold standby snapshots.

Answer

On-premises hot-site failover.

Answer

Single-region immutable backups.

Question 12

You are implementing a disaster recovery strategy for a database that uses synchronous replication. What is the most significant trade-off you must accept by enforcing this configuration?

Accepted Answer

Increased latency for write operations.. Synchronous replication guarantees zero data loss (RPO=0) but introduces latency overhead on write operations because the commit must wait for the acknowledgment from the secondary site.

Answer

Higher risk of data corruption.

Answer

Increased probability of backup failure.

Answer

Limited scalability of the database cluster.

Question 13

Your organization uses a 'Hot Site' with hardware-level replication. During a disaster, the primary site becomes unavailable, but the failover fails due to a 'Split-Brain' scenario. What is the fundamental cause of this?

Accepted Answer

Loss of the heartbeat connection/quorum service.. Split-brain happens when both sites think they are the primary due to loss of the quorum or heartbeat mechanism.

Answer

Mismatched firmware versions between servers.

Answer

Inadequate storage capacity for incoming logs.

Answer

Insufficient cooling at the hot site.

Question 14

When designing the Crisis Communication Plan, why is it essential to establish pre-approved communication templates?

Accepted Answer

To ensure consistent and rapid messaging during high-stress situations.. During a crisis, speed and accuracy are critical. Templates reduce cognitive load and prevent errors in messaging.

Answer

To allow marketing teams to create brand-focused content.

Answer

To bypass legal review during the crisis.

Answer

To fulfill regulatory requirements for daily status reports.

Question 15

What is the primary objective of a 'lessons learned' meeting conducted after a disaster recovery exercise?

Accepted Answer

Identify gaps in the plan and define remediation actions.. The objective is to identify gaps in the plan based on the exercise results and assign ownership for remediation.

Answer

Update the organizational chart.

Answer

Verify the status of the offsite backup tapes.

Answer

Evaluate the performance of the IT staff for disciplinary purposes.