Security+ Module 14: Disaster Planning and Recovery

Security+ Module 14:

Disaster Planning and Recovery

By Mr. Gallant

Multiple Choice

What document specifically covers moving operations to a temporary site? Choose the best response.

• BCP

• BIA

• COOP

• DRP

Multiple Choice

Which document is a business most likely to have more than one of? Choose the best response.

• BCP

• BIA

• COOP

• DRP

Multiple Choice

What is also known as a “structured walkthrough?” Choose the best response.

• Checklist test

• ISCP

• Simulation test

• Tabletop exercise

Multiple Select

Which of the following RAID levels incorporates disk striping? Select all that apply.

• RAID 0

• RAID 1

• RAID 5

• RAID 10

Multiple Choice

The process of rebuilding a RAID drive from parity data can cause a RAID drive to fail. True or false?

• True

• False

Multiple Choice

If you have a RAID implementation with data parity, you don’t need data backups. True or false?

• True

• False

Multiple Choice

You have a critical database server that continuously backs its files up to the cloud. Still, its software environment is so finicky that if it encountered a critical failure, it would take a long time to get it working again. How would you describe your recovery plan for that service? Choose the best response.

• High RPO and high RTO

• High RPO and low RTO

• Low RPO and high RTO

Multiple Choice

Clustering is similar to load balancing but tends to use tighter integration between redundant systems. True or false?

• True

• False

Multiple Choice

Your company rents a spare server room in a secondary location. It has all the necessary hardware, software, and network services, so you can load backups and take over. What is it? Choose the best response.

• Hot site

• Hot spare

• Cold site

• Cold spare

Multiple Choice

In terms of time, how does a differential backup plan generally differ from an incremental backup plan? Choose the best response.

• It’s slower to create backups, but quicker to restore data

• It’s quicker both to create backups and to restore data

• It’s quicker to create backups, but slower to restore data

• It’s slower both to create backups and to restore data

Multiple Choice

What backup type might require specific operating system support? Choose the best response.

• Differential

• Full

• Incremental

• Snapshot

Multiple Choice

Order the steps of the incident response process.

• Preparation, Identification, Containment, Investigation, Eradication, Recovery, Follow up

• Identification, Preparation, Containment, Investigation, Eradication, Recovery, Follow up

• Identification,

  Containment, Preparation, Investigation, Eradication, Recovery, Follow up

• Preparation,

  Eradication, Identification, Containment, Investigation, Recovery, Follow up

Multiple Choice

What is eDiscovery? Choose the best response.

• A process for sharing electronic forensic data.

• A process for identifying security incidents.

• A standard for forensic backup software.

•   A software application used to track security incidents.

Multiple Choice

You should start choosing an incident response team as soon as you’ve identified an incident. True or false?

• True

• False

Multiple Choice

After a security incident, you rush to take a screenshot of a telltale running process before you leisurely take a backup of suspicious files on the hard drive. What forensic principle are you exercising? Choose the best response.

• Order of volatility

• eDiscovery

• Chain of custody

• Audit trail

Multiple Choice

Why is it important to record time offsets when collecting evidence? Choose the best response.

• To compensate for logging systems that don’t record precise times

• To compensate for time differences between multiple systems

• To document the precise order of events

• To document the precise timing of events