easyMultiple Select
CISSP Practice Question: Which TWO of the following are key elements of a…
Which TWO of the following are key elements of a disaster recovery plan (DRP)?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Communication and notification procedures
Option A (Communication and notification procedures) is correct because a DRP must define exactly who is contacted, in what order, through which channels (phone, email, out-of-band), and how stakeholders, staff, and vendors are notified during and after a disruptive event. Option D (Recovery priorities and order of restoration) is correct because a DRP must specify the sequence in which systems, applications, and services are brought back online, typically driven by criticality and dependencies so the most vital functions are restored first. Options B and C are incorrect because standard operating procedures for daily tasks and patch management schedules are routine operational/IT management artifacts, not disaster recovery elements. Option E is incorrect because the business impact analysis (BIA) is an input that feeds the DRP by identifying critical processes and RTO/RPO targets, but the BIA results themselves are not a key element of the plan.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Communication and notification procedures
Why this is correct
Correct. Communication and notification procedures are critical to ensure stakeholders are informed during a disaster.
- ✗
Standard operating procedures for daily tasks
Why it's wrong here
Incorrect. Standard operating procedures for daily tasks are not part of a DRP; they address routine operations, not recovery.
- ✗
Patch management schedules
Why it's wrong here
Incorrect. Patch management schedules are part of ongoing maintenance, not disaster recovery planning.
- ✓
Recovery priorities and order of restoration
Why this is correct
Correct. The DRP must define recovery priorities and the order of restoration to ensure critical systems are restored first.
- ✗
Business impact analysis (BIA) results
Why it's wrong here
Incorrect. The BIA is a separate document that identifies critical business functions and their recovery requirements; it informs the DRP but is not an element of the DRP itself.
Go deeper
Related to this question
Learn chapter
Identity and Access Management (IAM)
Key term
Business impact analysis
A systematic process used to identify and evaluate the potential effects of an interruption to critical business operations as a result of a disaster, accident, or emergency.
Key term
Quality update policy
A quality update policy is a set of rules and schedules that IT administrators use to control which Windows updates are deployed to devices to ensure stability, security, and compatibility.
About these practice questions
This CISSP question is part of Courseiva's 816-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.