Infosec M5-8

Which type of organizations should prepare for the unexpected?

• Organizations of every size and purpose should also prepare for the unexpected.

• Small organizations that can easily recover.

• Only those without good insurance.

• Large organizations which have many assets at risk.

Ideally, the _____, systems administrators, the chief information security officer (CISO), and key IT and business managers should be actively involved during the creation and development of all CP components

• chief financial officer (CFO)

• senior auditor

• chief information officer (CIO)

• chief executive officer (CEO)

The CPMT should include a _____ who is a high-level manager to support, promote, and endorse the findings of the project and could be the COO or (ideally) the CEO/president.

• project manager

• project instigator

• executive-in-charge

• champion

Which if these is the primary reason contingency response teams should not have overlapping membership with one person on multiple teams?

• To allow people to specialize in one area.

•  To avoid cross-division rivalries.

• So individuals don't find themselves with different responsibilities in different locations at the same time.

• To spread the work out among more people.

The point in time before a disruption or system outage to which business process data can be recovered after an outage is ____.

• RTO

• MTD

• RPO

• WRT

The maximum amount of time that a system resource can remain unavailable before there is an unacceptable impact on other system resources is ____.

• MTD

• RPO

• RTO

• WRT

The total amount of time the system owner or authorizing official is willing to accept for a business process outage or disruption is _____.

• RTO

• MTD

• WRT

• RPO

The storage of duplicate online transaction data, along with the duplication of the databases, at a remote site on a redundant server is called _____.

• database shadowing

• remote journaling

• electronic vaulting

• application recovery

The most common schedule for tape-based backup is a _____ backup, either incremental or differential, with a weekly off-site full backup.

• daily on-site

• daily off-site

• 12 hour on-site

• hourly off-site

A(n) _____ is a document containing contact information for the people to be notified in the event of an incident.

• call registry

• alert roster

• phone list

• emergency notification system