Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A business continuity plan is the broadest of the three. Its job is to keep critical business functions running during and after any disruption, whether that's a flood, a power cut, a key supplier going dark, or a cyberattack. The plan doesn't care what caused the problem; it cares that payroll still runs, the phones still answer, and the warehouse still ships. A disaster recovery plan is the IT half of business continuity. Where the BCP asks "how does the business keep operating," the DRP asks "how do we get the systems, data, and infrastructure back." It's narrower, more technical, and far more measurable.An incident response plan is the security-specific playbook for what happens when something hostile or unexpected hits the environment - ransomware, a compromised account, data exfiltration, or a malware outbreak. It's the only one of the three built around an adversary, and that changes how it works. So bcp.
Tornado hit is a disaster, when a disaster takes place (DRP) is triggered. In this situation safety is the priority and not services such as securing any available sensitive data. Shifting operation to DRP technical backup to an alternate hot, warm site provides a disaster recovery like tornado. Note that DRP is a procedure which include the safety and the services (Safety before Service)
The correct answer is A. BCP (Business Continuity Plan). While the "Most Voted" option in many community forums is often DRP, the distinction lies in the goal of the question: handling essential public services.