Please Urgent help neede for exam question. please help.

All of the following are true of disaster recovery plans (DRPs) and DRP policies, except: a) the DRP consists of the policies and documentation needed for an organization to partially recover from an incident. b) the DRP must get all systems back online, not only essential systems. c) the disaster declaration policy outlines the process by which a DRP is activated. d) the disaster declaration policy defines the roles and responsibilities for assessing and declaring a disaster. The goal of conducting an incident analysis is to ascertain weakness. Because each incident is unique and might necessitate a distinct set of approaches, a range of steps can be pursued to aid the analysis. One of these steps is to , which entails mapping network traffic according to the time of day and looking for trends. a) create a knowledge base of threats b) profile the network c) correlate central logs d) understand business processes In addition to compiling the list of user access requirements, applications, and systems, the business impact analysis (BIA) also includes processes that are . These processes safeguard against any risks that might occur due to key staff being unavailable or distracted. a) rigid b) required c) automated d) manual In general, the incident response team (IRT) is composed of a team with individuals that have different specialties. One such individual is the who has intimate knowledge of the systems and configurations. This individual is typically a developer, systems administrator, or a network administrator. a) information security representative b) information technology subject matter expert (SME) c) legal representative d) human resources (HR) reoresentative