Deck 19: Disaster Recovery, Business Continuity, and Organizational Policies

Question 1

What is the term for step-by-step instructions that describe exactly how employees are expected to act in a given situation or to accomplish a specific task?

A)Policies
B)Procedures
C)Standards
D)Usage lists

Answer 1

B

Question 2

Which of the following is NOT a strategy for alternative site processing?

A)Hot site
B)Empty site
C)Cold site
D)Mutual aid agreements

Answer 2

B

Question 3

Which of the following is NOT a component of a security policy?

A)Acceptable use policy
B)Separation of duties
C)Need to know
D)Programming language conformity policy

Answer 3

D

Question 4

Which type of backup copies all files,but only since the last full backup?

A)Full
B)Differential
C)Incremental
D)Delta

Question 5

Which type of backup is the simplest to do,but takes the most storage space?

A)Full
B)Differential
C)Incremental
D)Delta

Question 6

Which document's main focus is the continued operation of the organization?

A)BIA
B)DRP
C)AUP
D)BCP

Question 7

If an organization can last without a business function for up to 30 days before it is severely impacted,that function would be categorized as which of the following?

A)Critical
B)Necessary for normal processing
C)Desirable
D)Optional

Question 8

If the loss of a business function would severely impact an organization,that function would be categorized as which of the following?

A)Critical
B)Necessary for normal processing
C)Desirable
D)Optional

Question 9

What is the primary purpose of a business impact analysis?

A)To address procedures for selecting user passwords
B)To create and maintain system backups
C)To identify and describe the most important functions for an organization
D)To outline an organization's plans to recover in the event a disaster strikes

Question 10

Which document defines the required data,resources,and steps to restore critical organizational processes?

A)BIA
B)BCP
C)DRP
D)AUP

Question 11

Which type of alternative site is a fully configured environment that is similar to the normal operating environment and can be operational within hours?

A)Hot site
B)Warm site
C)Cold site
D)Immediate site

Question 12

Which type of RAID spreads data across disks,and also adds parity,meaning that the loss of any single disk in the array will not result in the loss of any data?

A)RAID 0
B)RAID 1
C)RAID 2
D)RAID 5

Question 13

What is the name of the policy outlining procedures to combat dumpster diving?

A)Recycling
B)Disposal and destruction
C)Password management
D)Need to know

Question 14

Which type of RAID uses disk mirroring?

A)RAID 0
B)RAID 1
C)RAID 2
D)RAID 5

Question 15

Which type of backup is conducted at specific intervals,and only copies the portions of the files that have been changed?

A)Partial
B)Differential
C)Incremental
D)Delta

Question 16

Which of the following is NOT an element of a DRP?

A)Backup
B)Alternate sites
C)Fault tolerance
D)Password management

Question 17

Which alternative site is partially configured,usually having the peripherals and software,but not the more expensive main processing computer?

A)Hot site
B)Warm site
C)Cold site
D)Temporary site

Question 18

Which type of alternative site has the basic environmental controls necessary to operate,but has few of the computing components necessary for processing?

A)Hot site
B)Warm site
C)Cold site
D)Temporary site

Question 19

How is high availability generally achieved?

A)Full backup
B)Fault tolerance
C)Test,exercise,rehearse
D)Redundant systems

Question 20

Which alternative site is the most costly to maintain?

A)Hot site
B)Warm site
C)Cold site
D)Mutual aid agreement site

Question 21

RAID 5 implements exact copies of disks,with all the data mirrored on another drive.

Question 22

The disadvantage to full backups is that the restore process is complex.

Question 23

In which incident response phase might it be necessary to implement the BCP?

A)Preparation phase
B)Detection phase
C)Containment and eradication phase
D)Recovery phase

Question 24

Categorizing business functions is useful in determining which functions will be restored first in the event of a disaster.

Question 25

Which type of RAID does not provide redundancy to improve reliability?

A)RAID 0
B)RAID 1
C)RAID 5
D)All RAID types provide redundancy and improve reliability.

Question 26

___________ are high-level,broad statements of what the organization wants to accomplish.

A)Policies
B)Procedures
C)Standards
D)Guidelines

Question 27

A disaster recovery plan is critical for effective disaster recovery efforts.

Question 28

Incremental backups back up all information since the last full backup.

Question 29

_______________ is a term that refers to a type of business function that is nice to have,but does not affect the operation of the organization.

Question 30

The BCP is part of the larger DRP.

Question 31

_______________ is the term that refers to a type of business function that is absolutely essential for operations and without it the basic mission of the organization cannot occur?

Question 32

A(n)_______________ backup is a backup strategy in which only the files and software that have changed since the last full backup are stored.

Question 33

A key element in a business continuity plan is the availability of backups.

Question 34

Which policy dictates the action that should be taken when a significant modification to the software or hardware takes place?

A)Acceptable use policy
B)Due care policy
C)Change management policy
D)Disposal and destruction policy

Question 35

A warm site is a fully configured environment that is similar to the normal operating environment,and that can be operational immediately.

Question 36

Which policy outlines how the organization will prepare for and handle security incidents when they occur?

A)Acceptable use policy
B)Incident response policy
C)E-mail policy
D)Due diligence policy

Question 37

Which security policy establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations (and to avoid possible litigation)?

A)AUP
B)E-mail policy
C)Due diligence
D)Separation of duties

Question 38

A(n)_______________ backup is a type of backup that is conducted at specific intervals - only the portions of the files that have been changed will be stored.

Question 39

Policies are generally step-by-step instructions.

Question 40

The goal of the AUP is to ensure employee productivity,while limiting organizational liability due to inappropriate use of the organization's assets.

Question 41

What are the various ways a backup can be conducted and stored?

Question 42

A(n)_______________ is a fully configured environment that is similar to the normal operating environment,and that can be operational immediately or within a few hours depending on its configuration and the needs of the organization.

Question 43

Your boss discovers that the facilities where the computing equipment is housed sits on a fault line.He is concerned about business continuity.What kinds of strategies for alternate site processing can you suggest?

Question 44

List the four ways backups are conducted and stored

Question 45

Name at least four high-level policies an organization needs to consider.

Question 46

The ________ is a high-level statement produced by the senior management that outlines what security means to the organization and what the organization's goals are for security.

Question 47

_______________ are mandatory elements regarding the implementation of a policy.

Question 48

_______________ refers to the ability to maintain availability of data and operational processing,despite a disrupting event.

Question 49

List at least five types of disasters that can damage or destroy the information of an organization.

Question 50

A(n)_______________ outlines what the organization considers to be the appropriate use of company resources,such as computer systems,e-mail,telephone,internet access,and networks.

Question 51

What does a disaster recovery plan (DRP)define?

Question 52

Describe the various components of a business continuity plan.

Question 53

_______________ increases reliability through the use of redundant hard drives.