Info Assurance - Quiz 11

2

Susan performs a full backup of her server every Sunday at 1:00 a.m. and differential backups on Mondays through Fridays at 1:00 a.m. Her server fails at 9:00 a.m. on Wednesday. How many backups does Susan need to restore? - 4 - 2 - 3 - 1

disaster

A(n) _________ is an event that prevents a critical business function (CBF) from operating for a period greater than the maximum tolerable downtime (MTD). - disaster - contingency - violation - incident

Reciprocal agreement with another school district

Arturo is an IT manager for a school district. He is planning recovery options for a small data center that supports teacher and classroom activities for 5 of the 21 schools in his district. Many school districts in his state use similar classroom technology. Arturo is looking for a temporary alternate site that would be easy to cut over to and is affordable. Which option is most likely to fit Arturo's needs? - Contingency carrier - Reciprocal center - Reciprocal agreement with another school district - Service provider that has extra capacity

Structured walk-through

Carl has assembled a team of representatives from each department to test a new business continuity plan (BCP). During the test, the representatives meet in a room and review many aspects of the plan, such as the goals, scope, assumptions, and the structure of the organization. They also conduct scenario-based exercises as though they are executing the plan for a certain type of incident to find errors, such as gaps or overlaps. What type of plan is being conducted? - Simulation - Parallel - Structured walk-through - Checklist

Preparation

During which step of the incident-handling process do you develop a formal communication plan and identify all key stakeholders? - dentification - Documentation - Notification - Preparation

Identification

During which step of the incident-handling process does triage take place? - Identification - Response - Notification - Recovery and follow-up

Response

During which step of the incident-handling process is the goal to contain the incident? - Response - Notification - Recovery and follow-up - Identification

Recovery and follow-up

During which step of the incident-handling process should a lessons-learned review of the incident be conducted? - Notification - Recovery and follow-up - Response - Documentation

Alternate processing center or mirrored site

Hajar is responsible for keeping her banking institution's servers operating 24/7/365. Her recovery strategy is to have fully redundant or duplicate operations and synchronized data and to operate the site continuously. Which strategy has she selected? - Alternate processing center or mirrored site - Hot site - Warm site - Mobile site

Maximum tolerable downtime (MTD)

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. If the power goes out in her data center, Isabella estimates it will take six hours to move data center operations to an alternate site. Which of the following describes how long the agency can survive without a functioning data center? - Maximum tolerable downtime (MTD) - Recovery point objective (RPO) - Recovery time objective (RTO) - Critical business function (CBF)

Recovery time objective (RTO)

Isabella is an IT security manager for a state agency. The agency can survive for nine hours without a functioning data center. The power goes out in her data center. It takes six hours to move data center operations to an alternate site. Which of the following describes the time it takes for the move? - Mean time to failure (MTTF) - Recovery time objective (RTO) - Critical business function (CBF) - Recovery point objective (RPO)

Supervisory Control and Data Acquisition (SCADA)

Joe is responsible for the security of the systems that control and monitor devices for a power plant. What type of system does Joe likely administer? - Supervisory Control and Data Acquisition (SCADA) - Mainframe - Mobile fleet - Embedded robotic systems

Mean time to failure (MTTF)

What is the average time a device will function before it fails? - Recovery time objective (RTO) - Recovery point objective (RPO) - Mean time to failure (MTTF) - Mean time between failures (MTBF)

To enable an organization to make critical decisions ahead of time so personnel can manage and review decisions without the urgency of an actual disaster

What is the purpose of a disaster recovery plan (DRP)? - To set the order or priority for restoring an organization's functions after a disruption - To set the value of each business process or resource as it relates to how the entire organization operates - To enable an organization to make critical decisions ahead of time so personnel can manage and review decisions without the urgency of an actual disaster - To identify the critical needs to develop a business recovery plan

Random access memory (RAM)

Which data source comes first in the order of volatility when conducting a forensic investigation? - Logs - Files on disk - Random access memory (RAM) - Swap and paging files

Clustering

Which method of fault tolerance connects two or more computers to act like a single computer in a highly coordinated manner? - Load balancing - Outsourcing to the cloud - Clustering - Redundant Array of Inexpensive Disks (RAID)

Ensuring there are adequate operating system licenses

Which of the following is least likely to be needed when rebuilding systems that were damaged during a disaster? - Restoring data to the recovery point objective (RPO) - Ensuring there are adequate operating system licenses - Activating access control rules, directories, and remote access systems to permit users to get on the new systems - Updating operating systems and applications with the most current patches

The mean time between failures (MTBF) is closely associated with the recovery time objectives (RTOs) of several integrated critical business functions (CBFs).

Which of the following is not true of contingency planning? - The maximum tolerable downtime (MTD) is the maximum period of time that a business can survive a disabled critical function. - The recovery time objective (RTO) is the amount of time needed to recover a business process. It is often made up of several interlinked RTOs. - The mean time between failures (MTBF) is closely associated with the recovery time objectives (RTOs) of several integrated critical business functions (CBFs). - The recovery point objective (RPO) is the point to which data must be recovered.

It is faster to create differential weekday backups than incremental backups.

Which of the following is not true of data backup options? - An incremental backup starts with a full backup; successive backups back up only that day's changes. - A differential backup starts with making a full backup; successive backups back up changes made since the last full backup. - A full backup copies everything to backup media. - It is faster to create differential weekday backups than incremental backups.

Continue normal processes, such as separation of duties or spending limits

Which of the following should you avoid during a disaster and recovery? - While running at the alternate site, continue to make backups of data and systems - Combine services that were on different hardware platforms onto common servers to speed up recovery - If a number of systems are down, provide additional guidance or support to users - Continue normal processes, such as separation of duties or spending limits