Chapter 8 Assessment

A plan that details the steps to recover from a major disruption and restore the infrastructure necessary for normal business operations is a ________. A. Disaster recovery plan (DRP) B. Business impact analysis (BIA) C. Business continuity plan (BCP) D. None of the above

A.

A vulnerability is any exposure that could allow a threat to be realized. A. True B. False

A.

An IDS is what type of control? A. Detective control B. Preventive control C. Corrective control D. Compensating control E. All of the above

A.

The primary steps to disaster recovery include the safety of individuals, containing the damage, and assessing the damage and beginning the recovery operations. A. True B. False

A.

The process of describing a risk scenario and then determining the degree of impact that event would have on business operations is quantitative risk analysis. A. True B. False

B.

A plan that contains the actions needed to keep critical business processes running after a disruption is called a ________. A. Disaster recovery plan (DRP) B. Business impact analysis (BIA) C. Business continuity plan (BCP) D. None of the above

C.

Risk that remains even after risk mitigation efforts have been implemented is known as ________ risk. A. Qualitative B. Quantitative C. Residual D. None of the above

C.

________ is the limit of time that a business can survive without a particular critical system. A. Recovery time objective (RTO) B. Critical business function (CBF) C. Maximum tolerable downtime (MTD) D. None of the above

C.

Any event that either violates or threatens to violate your security policy is known as a(n) ________. A. Countermeasure B. Impact C. Risk D. Incident

D.

The incident-handling process includes which of the following? A. Documentation B. Response C. Notification D. Recovery and follow up E. All of the above

E.