CST339 - Ch 10

The overall planning for expected adverse events is called contingency planning (CP)

• True

• False

CP consists of four major components (BIA, IR, DR, BC). These four components can be merged/unified if required.

• True

• False

What is the name of the point marked with a ?

• Recovery point

• Recovery time

• Recovery Requirement

• Recovery Maintanence

What is the point that is referred to by the ?

• Cost to waste

• Cost to Save

• Cost Balance

• Cost of Minimum

When a threat becomes a valid adverse event.. it is classified as .. ?

• InfoSec Threat

• Infosec Incident

• Infosec Adversary

• InfoSec Validity

Incident response actions can be organized into which of the following THREE phases?

• Prediction

• Detection

• Reaction

• Recovery

When detecting incidents.. which of the following are probably indicators?

• Unusual system crashes

• Reported attacks

• IDS Notifications

• Presence of unfamiliar files

When should a IR team document an incident?

• Before confirming the incident

• After confirming the incident

• Before detecting the incident

• After detecting the incident

Which of the following can be used to classify disasters in a DR plan?

• Natural disasters

• Animal-made disasters

• Man-Made Disasters

• Unnatural disasters

Which of the following are valid Business Continuity Strategies?

• Hot sites

• Warm Sites

• Luke Warm Sites

• Cold Sites