The answer is that the most significant risk of using a warm site for disaster recovery is that data may not be synchronized with the primary site. This is because a warm site provides pre-configured hardware, network connectivity, and environmental controls, but it does not maintain real-time data replication; instead, it typically relies on periodic backups or asynchronous replication, creating a gap in data currency. On the ISC2 Certified in Cybersecurity CC exam, this question tests your understanding of Recovery Point Objectives (RPO) and how different DR site types handle data loss—a common trap is confusing a warm site’s infrastructure readiness with data readiness, when in fact the data lag is the critical vulnerability. Remember the memory tip: “Warm site, warm data? No—warm site, cold data.”
ISC2 CC Business Continuity, DR & Incident Response Practice Question
This CC practice question tests your understanding of business continuity, dr & incident response. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
An organization uses a warm site for disaster recovery. Which of the following is the MOST significant risk of this approach?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data may not be synchronized with the primary site
A warm site has infrastructure and connectivity ready but does not maintain real-time data synchronization with the primary site. The most significant risk is that data may not be synchronized, meaning the Recovery Point Objective (RPO) could be hours or days old, leading to potential data loss during failover. Unlike a hot site with synchronous replication, a warm site typically uses periodic backups or asynchronous replication, creating a gap in data currency.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Data may not be synchronized with the primary site
Why this is correct
Lack of real-time replication means data loss up to the last backup.
Related concept
Read the scenario before looking for a memorised answer.
✗
The site may be too far away
Why it's wrong here
Distance affects recovery time but is not the most significant risk.
✗
The site may not have recent data
Why it's wrong here
This is a risk, but the most significant is data currency.
✗
High cost of maintaining duplicate hardware
Why it's wrong here
While cost is a factor, it is less significant than data loss risk.
Common exam traps
Common exam trap: answer the scenario, not the keyword
ISC2 often tests the distinction between hot, warm, and cold sites by focusing on data synchronization versus infrastructure readiness — the trap here is that candidates confuse 'data may not be recent' (Option C) with the more precise technical risk of 'data may not be synchronized,' which is the defining vulnerability of a warm site.
Detailed technical explanation
How to think about this question
In a warm site, the infrastructure (servers, network, cooling) is pre-staged but often lacks live data replication. Recovery typically relies on restoring from the latest backup tapes or snapshots, which introduces an RPO that can range from hours to a day depending on backup frequency. For example, if backups are taken every 12 hours, a failure at hour 11 could lose nearly a full day of transactions, whereas a hot site using synchronous replication (e.g., with Oracle Data Guard or SQL Server Always On) would have near-zero RPO.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A security analyst at a medium-sized enterprise encounters this scenario during an investigation or architecture review. The correct answer reflects best practice for the specific threat or control described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Security exam questions test whether you can match controls to threats in context — not just recall definitions.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this CC question in full detail.
Business Continuity, DR & Incident Response — This question tests Business Continuity, DR & Incident Response — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Data may not be synchronized with the primary site — A warm site has infrastructure and connectivity ready but does not maintain real-time data synchronization with the primary site. The most significant risk is that data may not be synchronized, meaning the Recovery Point Objective (RPO) could be hours or days old, leading to potential data loss during failover. Unlike a hot site with synchronous replication, a warm site typically uses periodic backups or asynchronous replication, creating a gap in data currency.
What should I do if I get this CC question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.