CompTIA Security+ (SY0-601) — Question 322

Which of the following documents specifies what to do in the event of catastrophic loss of a physical or virtual system?

Answer options

• A. Data retention plan
• B. Incident response plan
• C. Disaster recovery plan
• D. Communication plan

Correct answer: C

Explanation

The Disaster recovery plan (C) is specifically designed to detail the steps to take during and after a catastrophic event affecting systems. The other options do not address recovery from such disasters; the data retention plan focuses on data management, the incident response plan is about handling security incidents, and the communication plan deals with information dissemination.