Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 26
- A Data backup capabilities
- B Alternate processing capabilities
- C Cost
- D Responsibility for products and services
Reveal correct answer
Correct answer: D
Explanation
Correct Answer:
D is correct. An organization is still ultimately responsible for the continuity of a product or service that is outsourced. Clients and customers will expect the organization to ensure continuity of its products and services, either by itself or by having chosen the right outside vendors to do the outsourcing.
Incorrect Answers:
A is incorrect. Data backup and recovery operations can be outsourced to an external provider who specializes in those operations if the company cannot perform them adequately.
B is incorrect. Alternate processing capabilities, such as physical sites, facilities, and systems, can be outsourced to third-party or external providers, if the company does not have the resources to fulfill them.
C is incorrect. The cost borne from recovering from a disaster can be outsourced, or transferred, to a third party or external organization. An example of this would be by purchasing disaster recovery insurance, which could help defray the cost of recovery.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
