IS360 Chapter 11 Quiz

Hajar is responsible for keeping her banking institution's servers operating 24/7/365. Her recovery strategy is to have fully redundant or duplicate operations and synchronized data and to operate the site continuously. Which strategy has she selected?

Alternate processing center or mirrored site

Which is not true of data backup options?

It is faster to create differential weekday backups than incremental backups

What is the average time a device will function before it fails?

Mean time to failure (MTTF)

Which data source comes first in the order of volatility when conducting a forensic investigation?

Random access memory (RAM)

Joe is responsible for the security of the systems that control and monitor devices for a power plant. What type of system does Joe likely administer?

Supervisory Control and Data Acquisition (SCADA)

Which is not true of contingency planning?

The mean time between failures (MTBF) is closely associated with the recovery time objectives (RTOs) of several integrated critical business functions (CBFs)

Susan performs a full backup of her server every Sunday at 1:00 a.m. and differential backups on Mondays through Fridays at 1:00 a.m. Her server fails at 9:00 a.m. on Wednesday. How many backups does Susan need to restore?

2

Which method of fault tolerance connects two or more computers to act like a single computer in a highly coordinated manner?

Clustering

Which of the following should you avoid during a disaster and recovery?

Continue normal processes, such as separation of duties or spending limits

True or False? A business impact analysis (BIA) details the steps to recover from a disruption and restore the infrastructure necessary for normal business operations

False

True or False? All types of disaster recovery sites are available in the cloud

False

True or False? Clustering comprises multiple disk drives that appear as a single disk drive but actually store multiple copies of data in case a disk drive in the array fails

False

True or False? During a simulation test of a contingency plan, you must shut down the original system at the primary site for the duration

False

True or False? When outsourcing operations to a cloud service provider, the client is responsible for determining the best fault tolerance implementations to meet the service level-agreement (SLA) availability requirements

False

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. If the power goes out in her data center, Isabella estimates it will take six hours to move data center operations to an alternate site. Which describes how long the agency can survive without a functioning data center?

Maximum tolerable downtime (MTD)

During which step of the incident-handling process do you develop a formal communication plan and identify all key stakeholders?

Preparation

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. The power goes out in her data center. It takes six hours to move data center operations to an alternative site. Which describes the time it takes for the move?

Recovery time objective (RTO)

During which step of the incident-handling process is the goal to contain the incident?

Response

Carl has assembled a team of representatives from each department to test a new business continuity plan (BCP). During the test, the representatives meet in a room and review many aspects of the plan, such as the goals, scope, assumptions, and the structure of the organization. They also conduct scenario-based exercises as though they are executing the plan for a certain type of incident to find errors, such as gaps or overlaps. What type of plan is being conducted?

Structured walk-through

What is the purpose of a disaster recovery plan (DRP)?

To enable an organization to make critical decisions ahead of time so personnel can manage and review decisions without the urgency of an actual disaster

True or False? An organization can maintain a cloud-based disaster recovery site for a fraction of the cost of a physical site

True

True or False? Any component that, if it fails, could interrupt business processing is called a single point of failure (SPOF)

True

True or False? Business continuity management includes business continuity planning, disaster recovery planning, crisis management, incident response management, and risk management

True

True or False? Fault-tolerance options are not replacements for data backups

True

True or False? Generally, once evidence becomes inadmissible, it cannot be fixed

True

True or False? Regarding disaster recovery, an alternate processing center or mirrored site is always ready and under the organization's control

True

True or False? The emergency operations center (EOC) is the place where an organization's recovery team will meet and work during a disruption

True

True or False? The recovery point objective (RPO) can come from the business impact analysis (BIA) or sometimes from a government mandate, such as banking laws

True

True or False? While running business operations at an alternate site, you must continue to make backups of data and systems

True

A(n) ________________ is an event that prevents a critical business function (CBF) from operating for a period greater than the maximum tolerable downtime (MTD)

disaster