CISSP ACTUAL FINALS ANSWERS AND QUESTIONS
SET A+
✔✔Business Unit Recovery - ✔✔The component of Disaster Recovery which deals
specifically with the relocation of a key function or department in the event of a disaster,
including personnel, essential records, communication facilities, fax, mail services, etc.
✔✔Checklist Test - ✔✔(desk check) a test that answers the questions: Does the
organization have the documentation it needs? Can it be located?
✔✔Cold Site - ✔✔Recovery alternative, a building only with sufficient power, and HVAC
✔✔Discretionary - ✔✔Enables data owners to dictate what subjects have access to the
objects they own
✔✔Contingency Plan - ✔✔A plan used by an organization or business unit to respond
to a specific systems failure or disruption of operations. May use any number of
resources (e.e workaround procedures, alternate work area, etc.)
✔✔Crisis - ✔✔A critical event, which, if not handled in an appropriate manner, may
dramatically impact an organization's profitability, reputation, or ability to operate.
✔✔Critical Functions - ✔✔Business activities or information that could not be
interrupted or unavailable for several business days without significantly jeopardizing
operation of the organization.
✔✔Critical Infrastructure - ✔✔Systems whose incapacity or destruction would have a
debilitating impact on the economic security of an organization, community, nation, etc
✔✔Critical Records - ✔✔Records or documents that, if damaged or destroyed, would
cause considerable inconvenience and/or require replacement or recreation at
considerable expense.
,✔✔Damage Assessment - ✔✔The process of assessing damage, following a disaster,
to computer hardware, vital records, office facilities, etc. And determining what can be
salvaged or restored and what must be replaced.
✔✔Data Backup Strategies - ✔✔Those actions and backup processes determined by
an organization to be necessary to meet its data recovery and restoration objectives,
including timeframes, technologies, offsite storage, and will ensuretime objectives can
be met.
✔✔Data Backups - ✔✔The back up of system, application, program and/or production
files to secondary media. Data backups can be used to restore corrupted or lost data or
to recover entire systems and databases in the event of a disaster.
✔✔Data Recovery - ✔✔The restoration of computer files from backup media to restore
programs and production data to the state that existed at the time of the last safe
backup.
✔✔Database Replication - ✔✔The partial or full duplication of data from a source
database to one or more destination databases.
✔✔Declaration - ✔✔A formal announcement by pre-authorized personnel that a
disaster or severe outage is predicted or has occurred and that triggers pre-arranged
mitigating actions (e.g. A move to an alternate site.)
✔✔Desk Check Test - ✔✔A test that answers the questions: Does the organization
have the documentation and people it needs. Do they understand the documentation?
✔✔Disaster - ✔✔An event which stops business from continuing.
✔✔Disaster Recovery Plan - ✔✔The document that defines the resources, actions,
tasks and data required to manage the business recovery process in the event of a
business interruption within the stated disaster recovery goals.
✔✔Disaster Recovery Teams (Business Recovery Teams) - ✔✔A structured group of
teams ready to take control of the recovery operations if a disaster should occur.
✔✔Red box - ✔✔Simulates the alert tones of coins being deposited into a pay phone
✔✔Distributed Processing - ✔✔A back up type, where the organization has excess
capacity in another location.
✔✔Network Address Hijacking - ✔✔Enable the attacker to re-route traffic from a
network device to a personal machine
,✔✔4 - ✔✔EAL Methodically designed, tested, and reviewed
✔✔Emergency - ✔✔A sudden, unexpected event requiring immediate action due to
potential threat to health and safety, the environment, or property.
✔✔Accidental threats - ✔✔More than 3-4 of all security violations are linked to insiders
of a company are
✔✔Emergency Procedures - ✔✔A plan of action to commence immediately to prevent
the loss of life and minimize injury and property damage.
✔✔Executive Succession - ✔✔Planning for the delegation of authority required when
decisions must be made without the normal chain of command
✔✔Disk Shadowing - ✔✔Ensure availability of data and provide fault-tolerance by
creating and maintaining two identical disks, provide online backup storage, but is very
expensive
✔✔Forward Recovery - ✔✔The process of recovering a database to the point of failure
by applying active journal or log data to the current backup files of the database.
✔✔Full Test (Full Interruption) - ✔✔A BCP testing type, a test that answers the
question: Can the organization operate at the alternate location only?
✔✔High-Risk Areas - ✔✔Heavily populated areas, particularly susceptible to high-
intensity earthquakes, floods, tsunamis, or other disasters, for which emergency
response may be necessary in the event of a disaster.
✔✔Hot Site - ✔✔Recovery alternative, everything needed for the business function,
except people and last backup
✔✔Full-interruption - ✔✔Regular operations is completely stop and move to the
alternative site
✔✔Incident Response - ✔✔The response of an organization to a disaster or other
significant event that may significantly impact the organization, its people, or its ability to
function productively.
✔✔Integrated Test - ✔✔A test conducted on multiple components of a plan, in
conjunction with each other, typically under simulated operating conditions
✔✔Phreakers - ✔✔Hackers who specialize in committing telephone fraud
, ✔✔Maximum Tolerable Downtime (MTD) - ✔✔Amount of time for restoring a business
process or function to normal operations without major loss
✔✔Data Source Name - ✔✔A logical name for the data store and does not use the
drive letter or directory location of the database. Can be use when programming ODBC
✔✔Mission-Critical Application - ✔✔An application that is essential to the organization's
ability to perform necessary business functions. Loss of the mission-critical application
would have a negative impact on the business, as well as legal or regulatory impacts.
✔✔Mobile Recovery - ✔✔A mobilized resource purchased or contracted for the purpose
of business recovery.
✔✔14443-4 - ✔✔ISO/IEC standard for smart cards - Transmission protocol
✔✔Mock Disaster - ✔✔One method of exercising teams in which participants are
challenged to determine the actions they would take in the event of a specific disaster
scenario. Mock disasters usually involve all, or most, of the applicable teams.
✔✔Data Mining - ✔✔The act of collecting and analyzing large quantities of information
to determine pattern of behavior and use them to form a conclusion about past, current,
and future behavior
✔✔Off Site - ✔✔A backup of data located where staff can not gain access readily and a
regional disaster will not cause harm
✔✔Off-Site Storage - ✔✔Alternate facility, other than the primary production site, where
duplicated vital records and documentation may be stored for use during disaster
recovery.
✔✔Dispersion - ✔✔Spreading out of light pulses which overlap the preceding or
upcoming purses, most prevalent in fiber optic cabling
✔✔Operational Exercise - ✔✔One method of exercising teams in which participants
perform some or all of the actions they would take in the event of plan activation.
Operational exercises are typically performed under actual operating conditions
✔✔Operational Impact Analysis - ✔✔Determines the impact of the loss of an
operational or technological resource. The loss of a system, network or other critical
resource may affect a number of business processes.
✔✔Operational Test - ✔✔A test conducted on one or more components of a plan under
actual operating conditions.
SET A+
✔✔Business Unit Recovery - ✔✔The component of Disaster Recovery which deals
specifically with the relocation of a key function or department in the event of a disaster,
including personnel, essential records, communication facilities, fax, mail services, etc.
✔✔Checklist Test - ✔✔(desk check) a test that answers the questions: Does the
organization have the documentation it needs? Can it be located?
✔✔Cold Site - ✔✔Recovery alternative, a building only with sufficient power, and HVAC
✔✔Discretionary - ✔✔Enables data owners to dictate what subjects have access to the
objects they own
✔✔Contingency Plan - ✔✔A plan used by an organization or business unit to respond
to a specific systems failure or disruption of operations. May use any number of
resources (e.e workaround procedures, alternate work area, etc.)
✔✔Crisis - ✔✔A critical event, which, if not handled in an appropriate manner, may
dramatically impact an organization's profitability, reputation, or ability to operate.
✔✔Critical Functions - ✔✔Business activities or information that could not be
interrupted or unavailable for several business days without significantly jeopardizing
operation of the organization.
✔✔Critical Infrastructure - ✔✔Systems whose incapacity or destruction would have a
debilitating impact on the economic security of an organization, community, nation, etc
✔✔Critical Records - ✔✔Records or documents that, if damaged or destroyed, would
cause considerable inconvenience and/or require replacement or recreation at
considerable expense.
,✔✔Damage Assessment - ✔✔The process of assessing damage, following a disaster,
to computer hardware, vital records, office facilities, etc. And determining what can be
salvaged or restored and what must be replaced.
✔✔Data Backup Strategies - ✔✔Those actions and backup processes determined by
an organization to be necessary to meet its data recovery and restoration objectives,
including timeframes, technologies, offsite storage, and will ensuretime objectives can
be met.
✔✔Data Backups - ✔✔The back up of system, application, program and/or production
files to secondary media. Data backups can be used to restore corrupted or lost data or
to recover entire systems and databases in the event of a disaster.
✔✔Data Recovery - ✔✔The restoration of computer files from backup media to restore
programs and production data to the state that existed at the time of the last safe
backup.
✔✔Database Replication - ✔✔The partial or full duplication of data from a source
database to one or more destination databases.
✔✔Declaration - ✔✔A formal announcement by pre-authorized personnel that a
disaster or severe outage is predicted or has occurred and that triggers pre-arranged
mitigating actions (e.g. A move to an alternate site.)
✔✔Desk Check Test - ✔✔A test that answers the questions: Does the organization
have the documentation and people it needs. Do they understand the documentation?
✔✔Disaster - ✔✔An event which stops business from continuing.
✔✔Disaster Recovery Plan - ✔✔The document that defines the resources, actions,
tasks and data required to manage the business recovery process in the event of a
business interruption within the stated disaster recovery goals.
✔✔Disaster Recovery Teams (Business Recovery Teams) - ✔✔A structured group of
teams ready to take control of the recovery operations if a disaster should occur.
✔✔Red box - ✔✔Simulates the alert tones of coins being deposited into a pay phone
✔✔Distributed Processing - ✔✔A back up type, where the organization has excess
capacity in another location.
✔✔Network Address Hijacking - ✔✔Enable the attacker to re-route traffic from a
network device to a personal machine
,✔✔4 - ✔✔EAL Methodically designed, tested, and reviewed
✔✔Emergency - ✔✔A sudden, unexpected event requiring immediate action due to
potential threat to health and safety, the environment, or property.
✔✔Accidental threats - ✔✔More than 3-4 of all security violations are linked to insiders
of a company are
✔✔Emergency Procedures - ✔✔A plan of action to commence immediately to prevent
the loss of life and minimize injury and property damage.
✔✔Executive Succession - ✔✔Planning for the delegation of authority required when
decisions must be made without the normal chain of command
✔✔Disk Shadowing - ✔✔Ensure availability of data and provide fault-tolerance by
creating and maintaining two identical disks, provide online backup storage, but is very
expensive
✔✔Forward Recovery - ✔✔The process of recovering a database to the point of failure
by applying active journal or log data to the current backup files of the database.
✔✔Full Test (Full Interruption) - ✔✔A BCP testing type, a test that answers the
question: Can the organization operate at the alternate location only?
✔✔High-Risk Areas - ✔✔Heavily populated areas, particularly susceptible to high-
intensity earthquakes, floods, tsunamis, or other disasters, for which emergency
response may be necessary in the event of a disaster.
✔✔Hot Site - ✔✔Recovery alternative, everything needed for the business function,
except people and last backup
✔✔Full-interruption - ✔✔Regular operations is completely stop and move to the
alternative site
✔✔Incident Response - ✔✔The response of an organization to a disaster or other
significant event that may significantly impact the organization, its people, or its ability to
function productively.
✔✔Integrated Test - ✔✔A test conducted on multiple components of a plan, in
conjunction with each other, typically under simulated operating conditions
✔✔Phreakers - ✔✔Hackers who specialize in committing telephone fraud
, ✔✔Maximum Tolerable Downtime (MTD) - ✔✔Amount of time for restoring a business
process or function to normal operations without major loss
✔✔Data Source Name - ✔✔A logical name for the data store and does not use the
drive letter or directory location of the database. Can be use when programming ODBC
✔✔Mission-Critical Application - ✔✔An application that is essential to the organization's
ability to perform necessary business functions. Loss of the mission-critical application
would have a negative impact on the business, as well as legal or regulatory impacts.
✔✔Mobile Recovery - ✔✔A mobilized resource purchased or contracted for the purpose
of business recovery.
✔✔14443-4 - ✔✔ISO/IEC standard for smart cards - Transmission protocol
✔✔Mock Disaster - ✔✔One method of exercising teams in which participants are
challenged to determine the actions they would take in the event of a specific disaster
scenario. Mock disasters usually involve all, or most, of the applicable teams.
✔✔Data Mining - ✔✔The act of collecting and analyzing large quantities of information
to determine pattern of behavior and use them to form a conclusion about past, current,
and future behavior
✔✔Off Site - ✔✔A backup of data located where staff can not gain access readily and a
regional disaster will not cause harm
✔✔Off-Site Storage - ✔✔Alternate facility, other than the primary production site, where
duplicated vital records and documentation may be stored for use during disaster
recovery.
✔✔Dispersion - ✔✔Spreading out of light pulses which overlap the preceding or
upcoming purses, most prevalent in fiber optic cabling
✔✔Operational Exercise - ✔✔One method of exercising teams in which participants
perform some or all of the actions they would take in the event of plan activation.
Operational exercises are typically performed under actual operating conditions
✔✔Operational Impact Analysis - ✔✔Determines the impact of the loss of an
operational or technological resource. The loss of a system, network or other critical
resource may affect a number of business processes.
✔✔Operational Test - ✔✔A test conducted on one or more components of a plan under
actual operating conditions.
