CISSP Security Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Securing physical facilities

  Why it's wrong here

  Securing physical facilities, while a critical aspect of an organization's overall security and risk management, is a preventative measure that precedes a disruption and is not the primary distinguishing focus of a Business Continuity Plan (BCP). A BCP primarily addresses the operational strategies and procedures for sustaining business functions *after* a facility may have been compromised or rendered unavailable, rather than solely on its initial physical protection.

• ✗

  Restoring IT systems and infrastructure

  Why it's wrong here

  Restoring IT systems and infrastructure, including servers, networks, and applications, is the specific and primary objective of a Disaster Recovery Plan (DRP). A DRP details the technical steps and procedures required to bring critical technology components back online after a disruptive event. While essential for supporting business operations, this technical restoration is a tactical component of the broader BCP, which addresses the continuity of the entire business, not just its IT backbone.

• ✓

  Maintaining critical business processes during a disruption

  Why this is correct

  Maintaining critical business processes during a disruption is the defining characteristic and primary objective of a Business Continuity Plan (BCP). A BCP outlines the strategies, procedures, and resources necessary to ensure that an organization's essential functions continue to operate, even when faced with significant outages or disasters. This involves identifying critical processes, determining acceptable downtime, and establishing alternative methods to sustain operations until full recovery is achieved.

• ✗

  Replacing hardware and software

  Why it's wrong here

  Replacing hardware and software components, such as damaged servers, workstations, or corrupted applications, is a specific task typically outlined within a Disaster Recovery Plan (DRP). This activity falls under the technical recovery efforts aimed at rebuilding or restoring the technological infrastructure. While vital for eventual operational resumption, it represents a tactical step in the IT recovery process rather than the overarching strategic goal of a BCP to sustain business functions through various means.

Go deeper

Related to this question