wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Chapter 10: Planning for Contingencies

Total questions: 20

Worksheet time: 9mins

Name
Class
Date
1.

Which of the following contains the contact information of individuals that need to be notified in the event of an actual incident?

a)

incident response policy

b)

business process

c)

alert roster

d)

after-action review

2.

Detecting a modification of system logs is an indicator that an actual incident has taken place.

a)

True

b)

False

3.

Which term below describes the point in time, prior to a disruption or outage, to which mission / business process data can be recovered?

a)

Maximum Tolerable Downtime (MTD)

b)

Recovery Time Objective (RTO)

c)

Recovery Point Objective (RPO)

d)

Work Recovery Time (WRT)

4.

What is the first phase of the CP process?

a)

Business impact analysis

b)

Incident response planning

c)

Disaster recovery planning

d)

Business continuity planning

5.

Which of the following is NOT a major component of contingency planning?

a)

Incident response plan

b)

Disaster relief plan

c)

Disaster recovery plan

d)

Business continuity plan

6.

Slow-onset disasters occur over time and gradually degrade an organization’s ability to withstand their effects.

a)

True

b)

False

7.

Which of the following terms best describe a site with a fully configured computer facility, including all services, communications links, and physical plant operations?

a)

hot site

b)

warm site

c)

mobile site

d)

cold site

8.

Which type of offsite backup service provides backups for transactional data only, typically in real time?

a)

Electronic vaulting

b)

Traditional data backups

c)

Database shadowing

d)

Remote journaling

9.

Which of the following is NOT considered a responsibility of the CMPT?

a)

verifying personnel status

b)

activating the alert roster

c)

plan maintenance schedule

d)

coordinating with emergency services

10.

There are several strategies that can be used to test contingency plans. Which of the following is the simplest kind of validation and involves distributing copies of the appropriate plans to all individuals who will be assigned roles during an actual incident?

a)

full-interruption testing

b)

simulation

c)

structured walk-through

d)

desk check

11.

One of the things that an incident response policy defines is what?

a)

Responsibilities of different users

b)

Staff working in the organization

c)

Time of day to work

12.

The incident response policy is the document that defines what?

a)

How organisations create incidences

b)

How organisations respond to employement

c)

How organisations respond to incidences

d)

How organisations employ ICT staff

13.

An event that poses a threat to the business information, in regard to its confidentiality, integrity & availability

a)

An information security incident

b)

A total data recovery failure

c)

A backup server breach

d)

A power failure in the server room

14.

Two things that need to be identified during an initial assessment of an incident:

a)

Type of attack

b)

Severity of attack

c)

How much it will cost to resolve the incident

d)

Whether or not to inform the police

15.
There are several reasons why a company would develop and implement a business continuity plan. Which of the following properly describes the best reason?
a)
To increase liability
b)
The continuation of a company
c)
Compliancy with regulations
d)
Properly react to disasters
16.
Which of the following is NOT considered a natural disaster that can affect computer systems?
a)
flood
b)
falling water
c)
excessive heat
d)
fire
17.
What is meant by 'trusted recovery'?
a)
It is a process of salvaging inaccessible, lost, corrupted, damaged or formatted data from secondary storage, removable media or files.
b)
Bringing a system to an operable condition after a disaster so that it can again accept and process data.
c)
An organized approach to addressing and managing the aftermath of a security breach or cyberattack
d)
It is the ability to ensure recovery without compromise after a system failure.
18.

What are the criterias needed to be an organization's ideal spokesperson? You may choose more than 1 answer

a)

confident

b)

knowledgeable on the crisis

c)

only knows how to speak in native language

d)

speaks well

e)

slow speaker

19.

What are the potential online platforms that organizations could use to identify and monitor crisis? You may choose more than 1 answer.

a)

Google News, Alerts and Trends

b)

Random online profiles

c)

Social Network Sites such as Facebook, Instagram and Twitter

d)

Individual web browsing patterns

e)

Public comments

20.

What is the suggested time frame for ' The Golden Hour'

a)

45 minutes

b)

30 minutes

c)

60 minutes

d)

120 minutes