Certified Information Systems Security Professional CISSP · Free Practice Question Easy

Question 26

Which of the following cannot be outsourced during a disaster?
  • A Data backup capabilities
  • B Alternate processing capabilities
  • C Cost
  • D Responsibility for products and services
Reveal correct answer

Correct answer: D

Explanation

Correct Answer:

D is correct. An organization is still ultimately responsible for the continuity of a product or service that is outsourced. Clients and customers will expect the organization to ensure continuity of its products and services, either by itself or by having chosen the right outside vendors to do the outsourcing. 

Incorrect Answers:

A is incorrect. Data backup and recovery operations can be outsourced to an external provider who specializes in those operations if the company cannot perform them adequately. 

B is incorrect. Alternate processing capabilities, such as physical sites, facilities, and systems, can be outsourced to third-party or external providers, if the company does not have the resources to fulfill them. 

C is incorrect. The cost borne from recovering from a disaster can be outsourced, or transferred, to a third party or external organization. An example of this would be by purchasing disaster recovery insurance, which could help defray the cost of recovery.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need