Question 530
Executives want to rehearse a ransomware decision without touching production systems. Which response best addresses the central security requirement with a defensible, risk-based design?
- Fail production storage to simulate every tabletop scenario
- Use a facilitated scenario discussion that tests roles, decisions and communications
- Run a parallel recovery exercise with defined isolation and reconciliation checks
- Assume attendance proves backup restorability
Explanation
Correct Answer
B:Tabletop exercises assess decisions with low operational disruption.
Incorrect Answers
A:A live outage is not a discussion-only exercise.
C:Parallel tests recovery capability without switching production service to standby. Use a facilitated scenario discussion that tests roles, decisions and communications.
D:Discussion cannot demonstrate actual recovery functionality.
Question 531
An incident team wants to test technical and communications steps using a simulated attacker without disrupting real users. Which response best addresses the central security requirement with a defensible, risk-based design?
- Run a bounded simulation with controlled injects, observation and escalation paths
- Only email staff a written policy and count that as a simulation
- Use a facilitated scenario discussion that tests roles, decisions and communications
- Give attackers unrestricted access to production to improve realism
Explanation
Correct Answer
A:Simulation offers realistic coordination tests without full production interruption.
Incorrect Answers
B:Reading is not exercising.
C:Tabletop exercises assess decisions with low operational disruption. Run a bounded simulation with controlled injects, observation and escalation paths.
D:Scope and safety are necessary.
Question 532
A disaster recovery team wants to start restored services at a standby site while live production continues unaffected. Which response best addresses the central security requirement with a defensible, risk-based design?
- Use only slide review with no restored systems
- Shut down the primary site as the first step of a parallel exercise
- Use a facilitated scenario discussion that tests roles, decisions and communications
- Run a parallel recovery exercise with defined isolation and reconciliation checks
Explanation
Correct Answer
D:Parallel tests recovery capability without switching production service to standby.
Incorrect Answers
A:Review does not show parallel recovery.
B:That converts the test into full interruption.
C:Tabletop exercises assess decisions with low operational disruption. Run a parallel recovery exercise with defined isolation and reconciliation checks.
Question 533
A hospital is considering a full interruption disaster test of its primary services. Which response best addresses the central security requirement with a defensible, risk-based design?
- Perform only with executive approval, strong safety controls, defined abort triggers and proven alternatives
- Run a parallel recovery exercise with defined isolation and reconciliation checks
- Declare full interruption successful after a discussion-only meeting
- Shut down all production without coordinating clinical operations
Explanation
Correct Answer
A:Full interruption tests are high confidence but carry high operational risk.
Incorrect Answers
B:Parallel tests recovery capability without switching production service to standby. Perform only with executive approval, strong safety controls, defined abort triggers and proven alternatives.
C:Discussion does not exercise service cutover.
D:Uncontrolled outage threatens safety.
Question 534
A disaster-recovered order website displays pages but cannot authorize payments or fulfill shipments. Which response best addresses the central security requirement with a defensible, risk-based design?
- Exclude payment partners from continuity planning
- Run cross-functional stakeholder exercises with reachable backups, roles and decision criteria
- Validate end-to-end business process dependencies beyond infrastructure uptime
- Treat a 200 OK HTTP response as proof of completed customer orders
Explanation
Correct Answer
C:Business continuity requires the service's actual mission function.
Incorrect Answers
A:External dependencies remain critical.
B:Business continuity crosses organizational boundaries. Validate end-to-end business process dependencies beyond infrastructure uptime.
D:Website availability alone cannot fulfill orders.
Question 535
A recovery plan assumes suppliers and legal counsel can join a crisis bridge immediately but none has rehearsed it. Which response best addresses the central security requirement with a defensible, risk-based design?
- Validate end-to-end business process dependencies beyond infrastructure uptime
- Run cross-functional stakeholder exercises with reachable backups, roles and decision criteria
- Depend exclusively on one unverified external phone number
- Test only the internal IT pager list
Explanation
Correct Answer
B:Business continuity crosses organizational boundaries.
Incorrect Answers
A:Business continuity requires the service's actual mission function. Run cross-functional stakeholder exercises with reachable backups, roles and decision criteria.
C:Single untested contact can fail.
D:Other stakeholders still may be unavailable.
Question 536
A data center allows visitors to walk from public reception into the server room after passing one unlocked door. Which response best addresses the central security requirement with a defensible, risk-based design?
- Issue time-bounded visitor identity, escort, purpose and exit logging controls for restricted areas
- Publish the restricted door code on an outside poster
- Create layered physical zones with staffed entry, badges and controlled server-room boundaries
- Rely only on a visitor sign without preventing movement
Explanation
Correct Answer
C:Physical access should match asset criticality.
Incorrect Answers
A:Visitors should not gain unobserved access to sensitive equipment. Create layered physical zones with staffed entry, badges and controlled server-room boundaries.
B:Public knowledge defeats physical control.
D:Signing does not enforce a door boundary.
Question 537
A restricted lab door has badge access but forced-open alarms are disabled overnight. Which response best addresses the central security requirement with a defensible, risk-based design?
- Enable monitored forced-door and held-open detection with responsible response coverage
- Issue time-bounded visitor identity, escort, purpose and exit logging controls for restricted areas
- Disconnect alarms to reduce noise permanently
- Treat missing alarms as low risk because badge logs exist
Explanation
Correct Answer
A:Authentication at the door does not detect physical tampering or bypass.
Incorrect Answers
B:Visitors should not gain unobserved access to sensitive equipment. Enable monitored forced-door and held-open detection with responsible response coverage.
C:Noise reduction by disabling detection defeats the control.
D:Forced entry may leave no valid badge event.
Question 538
A vendor repair crew is allowed into an office but its members are not escorted near sensitive racks. Which response best addresses the central security requirement with a defensible, risk-based design?
- Issue time-bounded visitor identity, escort, purpose and exit logging controls for restricted areas
- Give contractors permanent employee badges
- Rely only on the vendor company's logo
- Create layered physical zones with staffed entry, badges and controlled server-room boundaries
Explanation
Correct Answer
A:Visitors should not gain unobserved access to sensitive equipment.
Incorrect Answers
B:Persistent credentials survive the visit.
C:Branding is not identity verification.
D:Physical access should match asset criticality. Issue time-bounded visitor identity, escort, purpose and exit logging controls for restricted areas.
Question 539
A late-night security guard has no way to discreetly request assistance during a violent confrontation. Which response best addresses the central security requirement with a defensible, risk-based design?
- Require loud telephone calls in every threat scenario
- Provide a protected duress alert path and practiced escalation procedures
- Prioritize evacuation, life safety, emergency roles and safe shutdown when feasible
- Ask the guard to confront aggressors alone
Explanation
Correct Answer
B:Personnel safety controls must work without escalating danger.
Incorrect Answers
A:Speaking may increase risk.
C:Human safety outranks asset availability during an imminent hazard. Provide a protected duress alert path and practiced escalation procedures.
D:Solo confrontation creates unnecessary danger.
Question 540
An earthquake triggers fire alarms while staff focus on keeping servers online. Which response best addresses the central security requirement with a defensible, risk-based design?
- Prioritize evacuation, life safety, emergency roles and safe shutdown when feasible
- Keep locked exits secure against evacuation
- Provide a protected duress alert path and practiced escalation procedures
- Require staff to finish backups before evacuation
Explanation
Correct Answer
A:Human safety outranks asset availability during an imminent hazard.
Incorrect Answers
B:Access controls must support safe egress.
C:Personnel safety controls must work without escalating danger. Prioritize evacuation, life safety, emergency roles and safe shutdown when feasible.
D:Delaying evacuation puts personnel at immediate physical risk.
Certified Information Systems Security Professional (CISSP) Practice Tests