A. A "cold site" is a facility where power and space are available to install processing equipment, but it is not immediately available. If an organization uses a cold site, its disaster recovery plan must include arrangements to get computer equipment installed there quickly. Thus, a "cold site" arrangement is too vendor-dependent because the company has to rely on the vendor for timely delivery of the equipment.

B. A "hot site" arrangement must be fully operational and immediately available. A "hot site" arrangement cannot be too vendor-dependent.

C. Using excess capacity at another data center within the organization ensures that assets needed for backup are available. Thus, it is not too vendor-dependent.

D. A "cold and hot site" combination arrangement is where the hot sit is first used until the cold site is prepared. Thus, it is not too vendor-dependent.