Module 10 Test

Susan performs a full backup of her server every Sunday at 1:00 a.m. and differential backups on Mondays through Fridays at 1:00 a.m. Her server fails at 9:00 a.m. on Wednesday. How many backups does Susan need to restore?

2

A load balancer for a single website is used to accept requests on _____ and forward the requests to _____.

A single front-end IP address; multiple redundant back-end web servers

Security Onion is a propritary application. The cost of Security Onion is based on the size of the company.

False

True or False? A business impact analysis (BIA) details the steps to recover from a disruption and restore the infrastructure necessary for normal business operations.

False

True or False? During a simulation test of a contingency plan, you must shut down the original system at the primary site for the duration.

False

True or False? Major incident response plan elements do not have to be rehearsed.

False

Which of the following is NOT true of data backup options?

It is faster to create differential weekday backups than incremental backups.

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. If the power goes out in her data center, Isabella estimates it will take six hours to move data center operations to an alternate site. Which of the following describes how long the agency can survive without a functioning data center?

Maximum tolerable downtime (MTD)

During which step of the incident-handling process should a lessons-learned review of the incident be conducted?

Recovery and follow-up

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. The power goes out in her data center. It takes six hours to move data center operations to an alternate site. Which of the following describes the time it takes for the move?

Recovery time objective (RTO)

During which step of the incident-handling process is the goal to contain the incident?

Response

Carl has assembled a team of representatives from each department to test a new business continuity plan (BCP). During the test, the representatives meet in a room and review many aspects of the plan, such as the goals, scope, assumptions, and the structure of the organization. They also conduct scenario-based exercises as though they are executing the plan for a certain type of incident to find errors, such as gaps or overlaps. What type of plan is being conducted?

Structured walk-through

Which of the following is NOT true of contingency planning?

The mean time between failures (MTBF) is closely associated with the recovery time objectives (RTOs) of several integrated critical business functions (CBFs).

Critical Business Functions (CBFs) are processes that must be operational for an organization to carry out core business operations.

True

True or False? A parallel test of a contingency plan is the same as a full-interruption test except that processing does not stop at the primary site.

True

True or False? Business continuity management includes business continuity planning, disaster recovery planning, crisis management, incident response management, and risk management.

True

True or False? Examples of major disruptions include extreme weather, application failure, and criminal activity.

True

True or False? Patching computers and devices with the latest security fixes makes them more resistant to many types of attacks.

True

True or False? The emergency operations center (EOC) is the place where an organization's recovery team will meet and work during a disruption.

True

Which of the following is NOT a tool incorporated into Security Onion?

Wbadmin