Certified Information Security Manager (CISM) — Question 430

Which of the following is the BEST reason for an organization to use Disaster Recovery as a Service (DRaaS)?

Answer options

• A. It transfers the risk associated with recovery to a third party.
• B. It eliminates the need for the business to perform testing.
• C. It eliminates the need to maintain offsite facilities.
• D. It lowers the annual cost to the business.

Correct answer: C

Explanation

The correct answer is C because DRaaS allows organizations to avoid the costs and logistical challenges of maintaining offsite facilities for disaster recovery. Option A is incorrect as it pertains to risk transfer but does not address the core functionality of DRaaS. Option B is wrong since testing is still necessary to ensure recovery plans are effective. Option D, while it may be true in some cases, does not capture the primary reason for adopting DRaaS.