CASP+: Chapter 3 (2of2)

In the context of disaster recovery (DR) strategies, what does using the cloud for disaster recovery (DR) primarily entail?

• Utilizing a combination of on-site and cloud services for data recovery.

• Employing cloud services as the sole backup for data centers.

• Adapting legacy systems to work seamlessly with public cloud platforms.

• Using legacy systems alongside public cloud platforms.

What distinguishes Disaster Recovery as a Service (DRaaS) from relying solely on public cloud platforms for business continuity and disaster recovery (BCDR)?

• DRaaS involves pre-configured systems for near real-time data backup, while relying solely on public cloud platforms does not.

• Relying solely on public cloud platforms ensures near real-time data backup, while DRaaS does not.

• DRaaS relies on public cloud services as a backup DR site, while relying solely on public cloud platforms does not involve backup strategies.

• Relying solely on public cloud platforms requires a separate disaster recovery plan, while DRaaS does not.

What is the primary purpose of an after-action report (AAR) in the context of disaster recovery testing or real incidents?

• To assign blame for any shortcomings identified during the test or incident.

• To capture important details and outcomes of the test or incident in a standardized format.

• To provide a detailed breakdown of the disaster recovery plan.

• To outline the legal ramifications of the incident or test outcomes.

Which of the following sections is typically included in an after-action report (AAR) according to NIST SP 800-84?

• Identification of individuals responsible for any shortcomings during the incident or test

• Detailed breakdown of the disaster recovery plan

• Introduction, exercise scope, objectives, scenario description, findings, and recommendations

• Legal implications

What is the primary purpose of testing BCDR (Business Continuity and Disaster Recovery) plans?

• To evaluate the performance of hardware and software components.

• To identify and correct any overlooked issues and verify the plans' effectiveness.

• To provide emergency responders with extensive training and practice.

• To simulate real emergencies and observe staff reactions.

What are some common issues that may be discovered during testing of BCDR (Business Continuity and Disaster Recovery) plans?

• Human errors unrelated to the IT infrastructure.

• System recovery failure, data loss, missing dependencies, longer-than-expected recovery times, and software malfunctions.

• Communication breakdowns between IT departments and management.

• Financial discrepancies and budgetary oversights.

Which of the following standards and regulations includes descriptions of BCDR (Business Continuity and Disaster Recovery) capabilities?

• ISO 9001 (Quality Management)

• HIPAA (Health Insurance Portability and Accountability Act)

• GLBA (Gramm-Leach-Bliley Act)

• FISMA (Federal Information Security Modernization Act)

Which of the following standards and regulations primarily focuses on information and communication technology readiness for business continuity?

• FFIEC (Federal Financial Institutions Examination Council)

• ISO 27031 (Guidelines for information and communication technology readiness for business continuity)

• GASB (Governmental Accounting Standards Board)

• FISMA (Federal Information Security Modernization Act)

Which type of test involves isolating the DR site from the primary site, activating the DR site, and testing the functionality of services running at the DR site without impacting live production systems?

• Disaster Recovery Test

• Failover Test

• Parallel Test

• Full Interruption Test

Which type of test requires performing a true fail-over/fail-back exercise on real, live enterprise systems and data, impacting normal operations during the process?

• Parallel Test

• Business Continuity Test

• Full Interruption Test

• Disaster Recovery Test