Mod 10

Open Ended

What could you have done different in your game scenario for a better outcome???

Multiple Choice

What should an organization operate on regarding disasters?

• Small organizations need to prepare more due to limited resources.

• Disasters can be avoided with proper planning.

• Disasters are unlikely to happen.

• It is only a matter of time until a disaster strikes.

Multiple Select

What are the two main categories of disasters mentioned in the text?

• Natural disasters

• Local disasters

• Educational

• Man-made disasters

• Backup Events

Multiple Select

What are the key considerations in developing the Disaster Recovery (DR) team? (Pick 3)

• Organization structure

• Planning for essential documentation

• Training and rehearsal

• Leadership Style

• Workload

Multiple Choice

What is the purpose of the disaster recovery policy?

• Preventing cybersecurity incidents from occurring.

• Ensuring damage is quickly recovered from after an incident.

• Performing regular backups of all data.

• Analysing the cause of attacks and identifying improvements to procedures.

Multiple Choice

The first step in incident response is to identify a security incident.

• True
• False

Open Ended

Do a web search, does Penn State have a Disaster Recovery Policy? What info did you find?

Multiple Select

What are the steps involved in developing a disaster recovery plan?

• Develop the DR planning policy statement

• Review the business impact analysis (BIA)

• Identify preventive controls

• Create DR contingency strategies

Categorize

Options (17)

Minimal Downtime

Fully Operational

Ready to Take Over

Availability isn't Immediate

Partially Set Up

Immediate Availability

Availability takes a long time

Needs to be built

No pre-installed equipment

Some pre-installed equipment

Not Operational

Most Expensive

Least Expensive

Ready in Days/Weeks

All Equipment Pre-Installed

Ready in minutes

Ready in Weeks/Months

Organize these options into the right categories

Hot Site

Warm Site

Cold Site

Multiple Select

What are the key elements contained in the DR policy?

• Purpose

• Scope

• Roles and responsibilities

• Employee Benefits

Multiple Choice

What is the purpose of developing the DR planning document?

• To create a marketing strategy

• To provide guidance for restoring functionality at the primary location

• To outline employee responsibilities

• To summarize financial reports

Multiple Select

What are the three sets of activities that the DR team will develop for each disaster scenario?

• Actions during the disaster

• Actions after the disaster

• Actions before the disaster

• Before disaster documentation

Multiple Choice

What is the first step in disaster recovery (DR) planning according to the text?

• Identifying a safe location

• Determining the response to the scenario

• Notification of a trigger

• Focusing on technology and data protection

Multiple Choice

What are the key actions taken after a disaster has passed to ensure the organization can continue operations?

• Assess damage to facilities

• Activate business continuity plan

• Restore lost data

• Scrub systems of infection

Multiple Choice

What is the purpose of training management and staff in the roles described in the DR plan?

• To test the validity and effectiveness of the DR plan

• To create new roles for the staff

• To eliminate the need for a DR plan

• To prepare the teams for unrelated tasks

Multiple Choice

What should the organization do to keep the DR plan current?

• Update it annually

• Revisit it every five years

• Make it a static document

• Ignore it until needed

Multiple Choice

A sales representative regularly modifies confidential files on a laptop and needs them to be available all the time. The sales representative will be on a six-month business trip in two weeks. A technician has been asked to assist the sales representative with saving files. Which of the following is the BEST method to implement to prevent any data loss for the sales representative?

• Give the sales representative a USB security lock

• Create a redundant cloud storage drive

• Encrypt the laptop's image on the server

• Give the sales representative an external hard drive

Multiple Choice

Which of the following is an example of a slow-onset disaster?

• Mud flow

• Earthquake

• Flood

• Pest infestation

Multiple Select

What kind of threats can disaster recovery policies help to protect us from being impacted by?

• Natural disasters

• Malware

• Hardware failure

• Man-made

Multiple Choice

An online stock trading application is deployed to multiple Availability Zones in the us-east-1 region (N. Virginia) and uses RDS to host the database. Considering the massive financial transactions that the trading application handles, the company has hired you to be a consultant to make sure that the system is scalable, highly available, and disaster resilient. In the event of failure, the Recovery Time Objective (RTO) must be less than 2 hours and the Recovery Point Objective (RPO) must be 10 minutes to meet the compliance requirements set by the regulators.

 

In this scenario, which Disaster Recovery strategy can be used to achieve the RTO and RPO requirements in the event of system failure?

• Take 15-minute database backups stored in Glacier with transaction logs stored in S3 every 5 minutes

• Store hourly database backups to an EC2 instance store volume with transaction logs stored in an S3 bucket every 60 minutes

• Take hourly database backups to an S3 bucket with transaction logs stored in S3 every 5 minutes. Set up a Cross-Region Replication (CRR) to another AWS Region

• Configure your database to use synchronous replication between multiple Availability Zones

Multiple Choice

What should all members of the DR team have in their homes, vehicles, and offices?

• Single copy of the DR plan

• Multiple copies of the DR and BC plans

• No copies of the plans

• Only digital copies of the plans

Multiple Select

What are the phases involved in implementing the Disaster Recovery (DR) plan?

• Preparation

• Response

• Recovery

• Restoration

• Resumption