CSF Chapter 6 - 2024

What does the concept of "Five Nines" mean in terms of availability?

• Systems available 95.26% of the time

• Systems available 99.999% of the time

• Systems available 90.5% of the time

• Systems available 98.74% of the time 

Which term refers to the ability of a server, network, or data center to recover quickly and continue operation after a disruption?

• Redundancy

• Resiliency

• Availability 

• Fault Tolerance 

What are the major principles of achieving uninterrupted access to data and services in a high-availability system, as mentioned in the slides?

• Redundancy, Backup, and Detection

• Elimination of Single Points of Failure, System Resiliency, and Fault Tolerance

• Disaster Recovery, Business Continuity, and Incident Response

• Data Mirroring, System Hardening, and Configuration Complexity 

Which industry requires high availability for continuous trading, compliance, and customer trust? 

• Healthcare

• Retail 

• Finance 

• Public Safety 

What is one example of fault tolerance mentioned in the slides? 

• Data Mirroring 

• Configuration Complexity

• Disaster Recovery 

• Redundancy

What is the primary purpose of asset management in an organization? 

• Maximizing revenue 

• Minimizing downtime 

• Enhancing employee productivity

• Reducing cybersecurity threats 

What are the four goals of risk analysis?

• Identify, quantify, balance, and accept

• Identify, assess, mitigate, and recover 

• Identify assets, identify vulnerabilities, quantify probability, and avoid risk 

• Determine asset value, assess impact, mitigate threats, and accept risk 

Which approach to risk analysis assigns numbers to the analysis process, including asset value, exposure factor, and annualized rate of occurrence?

• Qualitative Risk Analysis

• Quantitative Risk Analysis 

• Risk Mitigation 

• Threat Identification 

How does layering contribute to cybersecurity defense?a) By creating a single impenetrable barrier 

• By creating a single impenetrable barrier 

• By minimizing diversity in security measures 

• By providing multiple coordinated defenses 

• By relying on obscurity for protection 

What is the purpose of N+1 redundancy in a data center?

• To create a fully redundant system 

• To reduce the complexity of the system 

• To ensure system availability in the event of a component failure 

• To increase the cost of maintenance contracts