20+ practice questions focused on Contingency Management — one of the most tested topics on the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP, Aug 2025 blueprint) (ISC) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Contingency Management PracticeDuring a disaster recovery simulation for a hybrid cloud environment, you discover that the automated orchestration tool fails to restore dependencies in the correct order because the cloud provider's metadata tags were purged. What is the most effective administrative control to prevent this during a real event?
Explanation: Mandatory tagging policies enforced through AWS Service Control Policies or Azure Policy are preventive administrative controls that block resource creation or modification when required metadata tags are missing. Because the orchestration tool depends on those tags to determine dependency order, enforcing them at the organization/management-group level ensures the metadata cannot be purged or omitted in the first place. This addresses the root cause — missing tags — rather than compensating after failure.
An ISSMP is overseeing a BCP program and notes that the current Business Impact Analysis (BIA) is heavily focused on RTO but lacks a critical dependency mapping for cross-functional business processes. Which specific action should the ISSMP prioritize to address the systemic risk of cascading failure during a disaster?
Explanation: To address the lack of critical dependency mapping for cross-functional business processes, the ISSMP needs to conduct a comprehensive dependency and interrelationship analysis (often mapped via business process modeling or enterprise architecture frameworks) rather than the SCOR model, which is tailored specifically to supply chain operations.
When classifying business processes for BCP, what is the 'Recovery Time Objective' (RTO) most effectively used for?
Explanation: Recovery Time Objective (RTO) defines the maximum acceptable duration of time that a business process can be down after a disaster before severe, unacceptable damage occurs. It is primarily used to determine the maximum tolerable downtime and guide the restoration timeline, whereas option C (data loss tolerance) defines the Recovery Point Objective (RPO). Therefore, the provided correct option and explanation do not accurately reflect standard BCP definitions.
An ISSMP is revising the BCP to account for 'Supply Chain Resiliency'. Which approach is best for verifying that critical third-party vendors can meet the organization's recovery requirements?
Explanation: Contractual RTO/RPO requirements must be validated via audit or simulation results.
Northwind Health maintains a DR plan that requires a full restore of its primary data center within four hours after a declared disaster. During the annual test, the recovery team restores systems from tape backups, but the last full backup is 26 hours old and the daily incremental backups were never verified. Which element of the contingency planning process has most directly failed to support the stated recovery objective?
Explanation: A recovery point objective is only meaningful if backups are verified and restorable. Here the team restored successfully but could only recover data up to 26 hours old, and the daily incrementals had never been validated. That means the backup process lacked integrity checking and periodic restore testing, so the achievable recovery point diverged from the planned one. Contingency management requires both recovery time and recovery point objectives to be proven through testing, not assumed from successful backup job logs.
+15 more Contingency Management questions available
Practice all Contingency Management questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Contingency Management. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Contingency Management questions on the ISC frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Contingency Management is tested as part of the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP, Aug 2025 blueprint) (ISC) blueprint. Practicing with targeted Contingency Management questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free ISC practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Contingency Management is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Contingency Management practice session with instant scoring and detailed explanations.
Start Contingency Management Practice →