Question 1

RAID 5 implements exact copies of disks,with all the data mirrored on another drive.

Accepted Answer

RAID 5 does not implement exact copies of disks with all the data mirrored on another drive. Instead, it uses block-level striping with distributed parity across multiple disks, providing fault tolerance and improved performance.

Question 2

The disadvantage to full backups is that the restore process is complex.

Accepted Answer

The restore process for full backups is straightforward because it involves restoring all data from a single backup set, without the need to combine data from incremental or differential backups.

Question 3

In which incident response phase might it be necessary to implement the BCP?

Accepted Answer

The Business Continuity Plan (BCP) outlines how an organization will continue to operate during and after a disruption. It is typically implemented during the Recovery phase of incident response, where steps are taken to restore normal business operations following a disruption. The BCP may also be implemented during the Preparation phase, where plans are made for responding to potential incidents, but it is more likely to be utilized during the Recovery phase when the incident has already occurred.

Question 4

Categorizing business functions is useful in determining which functions will be restored first in the event of a disaster.

Accepted Answer

Categorizing business functions based on their criticality and priority is fundamental to developing a disaster recovery plan. By knowing which functions are essential, businesses can establish recovery strategies and prioritize the order in which each function should be restored during the recovery process.

Question 5

Which type of RAID does not provide redundancy to improve reliability?

Accepted Answer

RAID 0 does not provide redundancy as it uses data striping without mirroring or parity. It is intended for improved performance rather than reliability. RAID 1, RAID 5, and other RAID types provide redundancy to improve reliability.

Question 6

___________ are high-level,broad statements of what the organization wants to accomplish.

Accepted Answer

Policies are high-level statements that define an organization's goals, philosophies, and rules for decision-making. They often guide the development of procedures, standards, and guidelines within the organization. Examples of policies might include a company's commitment to sustainability or its approach to diversity and inclusion.

Question 7

A disaster recovery plan is critical for effective disaster recovery efforts.

Accepted Answer

A disaster recovery plan outlines the steps and procedures to be followed in case of a disaster, and is essential for coordinated and effective disaster recovery efforts.

Question 8

Incremental backups back up all information since the last full backup.

Accepted Answer

Incremental backups only back up the information that has changed since the last backup, whether that last backup was a full backup or another incremental backup.

Question 9

_______________ is a term that refers to a type of business function that is nice to have,but does not affect the operation of the organization.

Accepted Answer

The answer of _______________ is a term that refers to...

Question 10

The BCP is part of the larger DRP.

Accepted Answer

The Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) are related but distinct components of an organization's overall risk management strategy. The BCP focuses on maintaining business operations during disruptions, while the DRP specifically addresses the recovery of IT systems and data after a disaster.

Question 11

_______________ is the term that refers to a type of business function that is absolutely essential for operations and without it the basic mission of the organization cannot occur?

Accepted Answer

The answer of _______________ is the term that refers to...

Question 12

A(n)_______________ backup is a backup strategy in which only the files and software that have changed since the last full backup are stored.

Accepted Answer

The answer of A(n)_______________ backup is a backup strategy in...

Question 13

A key element in a business continuity plan is the availability of backups.

Accepted Answer

Backups are critical in a business continuity plan as they ensure that important data and systems can be recovered in case of a disruption. Without backups, the recovery process can be difficult or impossible, which could result in significant losses for the organization. Therefore, the availability of backups is an essential element of a business continuity plan.

Question 14

Which policy dictates the action that should be taken when a significant modification to the software or hardware takes place?

Accepted Answer

The Change Management policy outlines the procedures and requirements for managing changes to software and hardware configurations. It ensures that any modifications are thoroughly planned, tested, and implemented in a controlled and documented manner to minimize potential negative effects on system availability, performance, and security.

Question 15

A warm site is a fully configured environment that is similar to the normal operating environment,and that can be operational immediately.

Accepted Answer

A warm site is partially equipped with some of the equipment found in a fully operational facility but requires additional installations and setup to become fully operational. It is not immediately ready like a hot site.

Question 16

Which policy outlines how the organization will prepare for and handle security incidents when they occur?

Accepted Answer

An incident response policy outlines how an organization will prepare for, handle, and respond to security incidents when they occur. It includes procedures for identifying, containing, eradicating, and recovering from incidents, as well as assigning responsibilities and roles to various members of the organization. Acceptable use policies, e-mail policies, and due diligence policies focus on different areas of information security and do not specifically address incident response.

Question 17

Which security policy establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations (and to avoid possible litigation)?

Accepted Answer

Due diligence is the security policy that establishes an organization's need to take reasonable precautions to demonstrate that it is being responsible in its operations and to avoid possible litigation. It is a legal concept that refers to the care that an organization must take to avoid harm to its stakeholders. This includes taking reasonable steps to protect sensitive information, financial data, and customer information from unauthorized access, use, or theft. AUP and e-mail policy are more specific policies that deal with acceptable use of technology resources and email communication, respectively. Separation of duties is a control that ensures that no one person can independently perform a critical task. While it can help with security, it is not a policy that specifically addresses an organization's need to take reasonable precautions to demonstrate responsibility.

Question 18

A(n)_______________ backup is a type of backup that is conducted at specific intervals - only the portions of the files that have been changed will be stored.

Accepted Answer

The answer of A(n)_______________ backup is a type of backup...

Question 19

Policies are generally step-by-step instructions.

Accepted Answer

Policies are typically broad statements or guidelines that provide guidance for decision making or action within an organization, rather than specific step-by-step instructions. Procedures, on the other hand, are more detailed and provide specific instructions for completing a task or executing a policy.

Question 20

The goal of the AUP is to ensure employee productivity,while limiting organizational liability due to inappropriate use of the organization's assets.

Accepted Answer

The AUP (Acceptable Use Policy) is designed to establish guidelines and limitations for accessing and utilizing an organization's digital and physical assets. The primary goal of the AUP is to promote responsible and productive behavior among employees while minimizing legal and financial risks due to misuse or abuse of organizational resources. Therefore, option A is correct.

Quiz 19: Disaster Recovery, Business Continuity, and Organizational Policies