ISC2 CC Practice Question: Business Continuity, Disaster Recovery, and Incident Response
An organization is adopting the 3-2-1 backup rule. They currently have data on a primary server and a daily backup to an external hard drive. To comply with the rule, what is the minimum additional requirement?
⚠ Common exam trap
Candidates often confuse the components of 3-2-1: candidates might think adding any third copy suffices, but the offsite requirement is critical and often overlooked.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A cloud backup stored offsite
The 3-2-1 backup rule requires at least three copies of data, on two different media types, with one copy stored offsite. The organization currently has two copies (primary and external hard drive), both likely on-site and possibly the same media type. Adding a cloud backup provides the required third copy and satisfies the offsite requirement, making it the minimum additional requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A second external hard drive stored on-site
Why it's wrong here
A second external hard drive on-site provides media diversity but leaves every copy in the same physical location, so the off-site requirement of 3-2-1 stays unmet. On-site rotation is tempting because it protects against single-device failure, which suits disaster recovery from hardware faults rather than site-wide events.
- ✗
An incremental backup to a network share
Why it's wrong here
The 3-2-1 rule requires three copies, two different media types, and one copy off-site. An incremental backup to a network share adds a third copy but keeps it on-site, so the off-site leg remains unmet. Incremental backups are tempting because they reduce storage and bandwidth, yet location is the failing axis here.
- ✗
A full backup on tape stored in the same room
Why it's wrong here
Keeping the tape in the same room leaves the copy exposed to the same fire, flood or theft as the primary and external drive, so the 3-2-1 rule's off-site leg stays unmet. Tape itself is a valid second medium; it would satisfy the rule if stored at a separate location.
- ✓
A cloud backup stored offsite
Why this is correct
A cloud backup stored offsite satisfies the 3-2-1 rule's offsite leg, since the existing external drive already provides the second copy on a different medium. The primary server plus daily external backup give two copies; only an offsite location remains outstanding, which cloud storage delivers without physical transport.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.