ISSAP practice question 22 of 30

In which of the following types of tests are the disaster recovery checklists distributed to the members of disaster recovery team and asked to review the assigned checklist?

Full set: 237 questions
Answer options
A: Parallel test
B: Simulation test
C: Full-interruption test
D: Checklist test Correct answer
Correct Answer:
D. Checklist test
Explanation

A checklist test is a fundamental and non-disruptive method for validating a disaster recovery plan. In this test, copies of the plan and relevant checklists are distributed to the members of the disaster recovery team. Each member is responsible for reviewing their assigned sections and tasks to ensure the information is accurate, current, and complete. The primary goals are to familiarize team members with their roles and to identify any gaps or errors in the documentation without impacting live operations. This method serves as a preliminary step before more complex and resource-intensive tests are conducted.

Why Incorrect

A. Parallel test: This test involves activating the alternate recovery site and running its systems in parallel with the primary production site; it is an operational test, not a document review.
B. Simulation test: This is a role-playing exercise where team members walk through the response to a specific disaster scenario to test procedures and decision-making, which is more interactive than a simple checklist review.
C. Full-interruption test: This is the most comprehensive and disruptive test, involving the shutdown of the primary site and a complete failover of operations to the alternate site.

References

1. National Institute of Standards and Technology (NIST) Special Publication 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems. Appendix G, "Contingency Plan Testing," page G-1, describes the "Checklist/Read-through Test" as: "Copies of the plan are distributed to each functional area for review. The manager from each area reads through the plan and provides feedback to the contingency planning coordinator." This directly matches the scenario in the question.

2. National Institute of Standards and Technology (NIST) Special Publication 800-84, Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities. Section 4.3, "Types of Exercises," and Table 4-1 on page 20 describe a hierarchy of exercises. The checklist test falls into the most basic category, often preceding more complex exercises like tabletop simulations (Simulation test), functional exercises (Parallel test), and full-scale exercises (Full-interruption test).

Scroll to Top