Explanation/Reference:
Explanation:
SMTP uses port 25.
Incorrect Answers:
A: FTP uses port 21.
B: Telnet uses port 23.
D: DNS uses port 53.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1289

Business Continuity Plan (BCP) provides procedures for sustaining mission/business operations while recovering from a significant disruption.
The BCP focuses on sustaining an organization's mission/business processes during and after a disruption. An example of a mission/business pro cess may be an organization's payroll process or customer service process. A BCP may be written for mission/business processes within a single business unit or may address the entire organization's processes. The BCP may also be scoped to address only the functions deemed to be priorities. A BCP may be used for long-term recovery in conjunction with the COOP plan, allowing for additional functions to come online as resources or time allow. Because mission/business processes use information systems (ISs), the business continuity planner must coordinate with information system owners to ensure that the BCP expectations and IS capabilities are matched.
For your exam you should know the information below: Plan Purpose Scope Plan Relationship Business Continuity Plan (BCP) Provides procedures for sustaining mission/business operations while recovering from a significant disruption. Addresses mission/business processes at a lower or expanded level from COOP MEFs. Mission/business process focused plan that may be activated in coordination with a COOP plan to sustain non-MEFs. Continuity of Operations Plan (COOP) Provides procedures and guidance to sustain an organization's MEFs at an alternate site for up to 30 days; mandated by federal directives Addresses MEFs at a facility; information systems are addressed based only on their support of the mission essential functions. MEF focused plan that may also activate several business unit-level BCPs, ISCPs, or DRPs, as appropriate. Crisis Communications Plan Provides procedures for disseminating internal and external communications; means to provide critical status information and control rumors. Addresses communications with personnel and the public; not information system-focused. Incident-based plan often activated with a COOP or BCP, but may be used alone during a public exposure event. Critical Infrastructure Protection (CIP) Plan Provides policies and procedures for protection of national critical infrastructure components, as defined in the National Infrastructure Protection Plan. Addresses critical infrastructure components that are supported or operated by an agency or organization. Risk management plan that supports COOP plans for organizations with critical infrastructure and key resource assets. Cyber Incident Response Plan Provides procedures for mitigating and correcting a cyber attack, such as a virus, worm, or Trojan horse. Addresses mitigation and isolation of affected systems, cleanup, and minimizing loss of information. Information system-focused plan that may activate an ISCP or DRP, depending on the extent of the attack. Disaster Recovery Plan (DRP) Provides procedures for relocating information systems operations to an alternate location. Activated after major system disruptions with long-term effects. Information system-focused plan that activates one or more ISCPs for recovery of individual systems. Information System Contingency Plan (ISCP) Provides procedures and capabilities for recovering an information system. Addresses single information system recovery at the current or, if appropriate alternate location. Information system-focused plan that may be activated independent from other plans or as part of a larger recovery effort coordinated with a DRP, COOP, and/or BCP Occupant Emergency Plan (OEP) Provides coordinated procedures for minimizing loss of life or injury and protecting property damage in response to a physical threat. Focuses on personnel and property particular to the specific facility; not mission/business process or information system-based. Incident-based plan that is initiated immediately after an event, preceding a COOP or DRP activation. Business Recovery Plan Provides procedure for recovering business operations immediately following a disaster Address business process; not IT-focused;IT address based only on its support for business.
The following answers are incorrect:
Occupant Emergency Plan - Provides coordinated procedures for minimizing loss of life or injury and protecting property damage in response to a physical threat.
Cyber Incident Response Plan - Provides procedures for mitigating and correcting a cyber-attack, such as a virus, worm, or Trojan horse
Disaster Recovery Plan - Provides procedures for relocating information systems operations to an alternate location.
The following reference(s) were/was used to create this question:
CISA review manual 2014 page number 123 NIST SP 800-34
Topic 9, Legal, Regulations, Investigations and Compliance

User configuration of nonuser-configured authentication mechanisms
is not supported by the Open Group SSO interface objectives.
Authentication mechanisms include items such as smart cards and
magnetic badges. Strict controls must be placed to prevent a user
from changing configurations that are set by another authority.
Objective a supports the incorporation of a variety of authentication
schemes and technologies. Answer c states that the interface functional objectives do not require that all sign-on operations be performed at the same time as the primary sign on. This prevents the creation of user sessions with all the available services even though
these services are not needed by the user.
The creation of a default user profile will make the sign-on more efficient and less time-consuming.
In summary, the scope of the Open Group Single Sign-On Standards
is to define services in support of:
The development of applications to provide a common, single
end-user sign-on interface for an enterprise.
The development of applications for the coordinated management
of multiple user account management information bases
maintained by an enterprise.

Section: Security Architecture and Engineering