Chapter 9: Resilience and Physical Security

Naomi wants to handle increasing load by scaling cloud-hosted resources as needed while having the change remain transparent to users. She also wants to allow for upgrades and system replacements transparently. What solution should she select?

• Load balancing

• Clustering

• Geographic diversity

• A hot site

Answer explanation

Key Phrase: "scaling cloud-hosted resources"

Explanation:
Correct Answer (A): Load balancing enables systems to be scaled up or down as needed, and it ensures that users are unaware of the changes. It also helps to manage traffic distribution and allows for system upgrades or replacements without interrupting service.
Why others are wrong:

• B: Clustering provides fault tolerance by having systems work together but doesn’t necessarily offer the transparent scalability or system replacement capabilities of load balancing.

• C: Geographic diversity provides resilience by spreading resources across locations but does not focus on scaling or upgrades in a transparent manner.

• D: A hot site is a fully functional backup system for disaster recovery, but it doesn't provide the scaling flexibility Naomi needs.

Rick performs a backup that captures the changes since the last full backup. What type of backup has he performed?

• A new full backup

• A snapshot

• An incremental backup

• A differential backup

Answer explanation

Key Phrase: "captures changes since last full backup"

Explanation:
Correct Answer (D): A differential backup captures changes since the last full backup, which means it will grow in size as more time passes since the last full backup.
Why others are wrong:

• A: A new full backup would back up all data, regardless of changes.

• B: A snapshot is a point-in-time image of a system or disk but doesn’t specifically capture only changes.

• C: An incremental backup only captures changes since the last backup, whether full or incremental, so it is more space-efficient than a differential backup.

What type of recovery site has some or most systems in place but does not have the data needed to take over operations?

• A hot site

• A warm site

• A cloud site

• A cold site

Answer explanation

Key Phrase: "most systems in place but lacks data"

Explanation:
Correct Answer (B): A warm site has systems, power, and connectivity ready, but it does not have the most current data to immediately take over operations.
Why others are wrong:

• A: A hot site is fully equipped and can take over operations immediately, including having the necessary data.

• C: A cloud site refers to a cloud-based recovery solution but is not a standard recovery site category.

• D: A cold site has basic infrastructure (space, power) but requires setting up systems and restoring data to take over operations.

Ben wants to test his warm site to verify that it will take over operations successfully. What type of testing is this?

• Parallel processing

• Simulation

• Failover

• A tabletop exercise

Answer explanation

Key Phrase: "test warm site for operations takeover"

Explanation:
Correct Answer (C): Failover testing involves switching from the primary site to a backup (or warm site) to verify that it can handle operations in the event of a disaster.
Why others are wrong:

• A: Parallel processing runs both sites simultaneously, not to test failover functionality.

• B: Simulation testing involves creating a scenario to see how systems would react but doesn't involve an actual failover.

• D: A tabletop exercise is a discussion-based scenario review, not an actual operational test.

Felix wants to clone a virtual machine. What should he do to capture a live machine, including the machine state?

• A full backup

• A snapshot

• A differential backup

• Live boot media

Answer explanation

Key Phrase: "clone a virtual machine, including machine state"

Explanation:
Correct Answer (B): A snapshot captures the state of a virtual machine (including the machine state, disk, memory, etc.) at a specific point in time, making it suitable for cloning.
Why others are wrong:

• A: A full backup copies data but typically doesn't capture the full state, including memory.

• C: A differential backup captures changes since the last full backup but doesn’t capture the live machine state.

• D: Live boot media is used to boot a system from external media and is not used for cloning.

Sally is working to restore her organization's operations after a disaster took her data center offline. What critical document should she refer to as she restarts systems?

• The restoration order documentation

• The TOTP documentation

• The HOTP documentation

• The last-known-good configuration documentation

Answer explanation

Key Phrase: "restore operations after disaster"

Explanation:
Correct Answer (A): Restoration order documentation ensures that systems and services are brought back online in the correct sequence, prioritizing critical operations first.
Why others are wrong:

• B: TOTP and HOTP are one-time password systems, unrelated to disaster recovery.

• C: The last-known-good configuration refers to the state of a system before an issue occurred, not typically a primary reference for restarting services after a disaster.

Mike wants to stop vehicles from traveling toward the entrance of his building. What physical security control should he implement?

• An air gap

• A hot aisle

• A robotics sentry

• A bollard

Answer explanation

Key Phrase: "stop vehicles from traveling toward entrance"

Explanation:
Correct Answer (D): Bollards are physical barriers (often pillars) that prevent vehicles from accessing restricted areas.
Why others are wrong:

• A: An air gap is a security measure used for separating networks but doesn't apply to physical vehicle control.

• B: A hot aisle refers to the arrangement of systems in a data center, not a physical barrier.

• C: A robotics sentry is not a standard or commonly used physical security control.

Alecia wants to ensure that her backups cannot be accessed by third parties while stored in an offsite storage location. What should she do to secure her backups?

• Hash the backup data

• Avoid the use of offsite storage locations

• Employ security guards

• Encrypt the backup data

Answer explanation

Key Phrase: "ensure backups cannot be accessed by third parties"

Explanation:
Correct Answer (D): Encrypting backup data ensures that only authorized parties can access the contents of the backup, even if it is physically stolen or compromised.
Why others are wrong:

• A: Hashing is used for data integrity checks, not for securing data access.

• B: Avoiding offsite storage is not a practical or recommended solution for backup security.

• C: Security guards do not protect the data itself but only physical security.

Fred wants to be able to recover his database transactions at any point in time if a physical disaster occurs involving his data center. His organization uses daily backups. What additional solution should he select to support this need?

• Onsite journaling

• Onsite snapshots

• Offsite journaling

• Offsite snapshots

Answer explanation

Key Phrase: "recover database transactions at any point"

Explanation:
Correct Answer (C): Offsite journaling keeps a record of all database transactions in real-time, ensuring that no data is lost between backup intervals.
Why others are wrong:

• A: Onsite journaling only covers local data and is not sufficient if the data center is lost.

• B: Onsite snapshots are useful for quick recovery but don't provide transaction-level granularity.

• D: Offsite snapshots provide a point-in-time backup but do not capture continuous transaction changes.

Ellen is concerned about her company's resilience and wants to ensure it can handle either changing loads or support disaster recovery and business continuity efforts if a primary location or data center were taken offline. Which of the following should she primarily focus on during her capacity planning?

• People, technology, and infrastructure

• A generator and a UPS

• RAID 0, 1, 5, and 10

• Incremental, differential, and full backups

Answer explanation

Key Phrase: "capacity planning for resilience"

Explanation:
Correct Answer (A): Effective capacity planning ensures that all resources—people, technology, and infrastructure—are prepared to handle changing loads or unexpected disruptions.
Why others are wrong:

• B: A generator and UPS are important but are not the main focus of overall resilience planning.

• C: RAID configurations help with data storage redundancy but are only a small part of overall capacity planning.

• D: Backups are essential but are not the sole focus for ensuring long-term resilience.