CYBR 4330 - Chapter 10 | UPDATED Questions with 100%
Verified Answers
Q1: Introduction
A: •An organization should operate on the premise that it is only a matter of time until a
disaster strikes.
•Only through meticulous preparation and ongoing diligence can an organization
properly respond when a disaster occurs.
Q2: Facing Key Challenges
A: •Part of the challenge with disaster planning is that disasters are not confined to the IT
department, nor are they limited to the information assets of an organization.
•Frequently, a disaster is widespread enough to affect multiple departments and levels of
authority in the organization, as well as the community that comprises the organization,
including the organization's customers and suppliers.
•During a disaster services outside the organization may also be affected..
•A seemingly routine event can quickly spin out of control, creating a worst-case
scenario.
•This situation could result in service disruptions for weeks or months, requiring a
government to declare a state of emergency.
•Even if people are not confined to their homes, only some of an organization's
employees may be available for work, as happened during the 2020 COVID-19
pandemic.
•Organizations must communicate to their employees what is expected of them during a
disaster.
Q3: Depending on the scope of the disaster, implementing the DR
plan typically involves the following phases, which may or may
not overlap with the BC plan
A: •Preparation
•Response
•Recovery
•Restoration
•Resumption
Q4: Preparation: Training the DR Team and the Users
A: The planning and rehearsal necessary to respond to a disaster
•In DR planning there is no prevention phase because the vast majority of disasters
cannot be prevented.
•However, some organizations can minimize the probability of being hit with certain
disasters by preparing for them.
•Preparation means making an organization ready for possible contingencies that can
escalate to become disasters.
•This includes the development of the BIA, the organizing and staffing of the various
, teams necessary to assist in DR, and the development of the DR plan, which focuses DR
efforts if a disaster strikes.
Q5: Plan Distribution
A: •How the plan is distributed is not as important as making sure that all personnel have
access to the plan, have fully read it, and understood it.
•In order to cover all bases, password-protected copies of critical contingency plans
should be stored wherever employees may need access to them.
•This means the plans must be stored
•At the office—Physical copies in the employees' offices, electronic copies on all
organizational computer systems.
•Away from the office—Physical copies in employees' homes, electronic copies available
on home systems.
•Online (anytime, anywhere)—Electronic copies stored online.
Q6: Plan Triggers and Notification
A: •The preparation phase is a continuous one; however, other phases are activated by
triggers that can originate from a number of sources, including
•Management notification
•Employee notification
•Emergency management notification
•Local emergency services
•Media outlets
Q7: Disaster Recovery Planning as Preparation
A: •Developing an effective DR plan is the cornerstone of preparation.
•The primary goals of the DR plan are to
1.Eliminate or reduce the potential for injuries, loss of human life, damage to facilities, and
loss of assets and records.
2.Immediately invoke the emergency provisions of the DR plan to stabilize the effects of
the disaster, allowing for appropriate assessment and the beginning of recovery efforts.
3.Implement the procedures contained in the DR plan according to the type and impact
of the disaster.
•To plan for disaster, the CP team engages in scenario development and impact analysis,
which categorizes the level of threat that each potential disaster poses.
•Everyone assigned to the DR team should be aware of their duties during a disaster.
•Mitigation of impact is the inclusion of action steps to minimize the disaster's damage on
the operations of the organization.
•Plans should include alternative implementations for various systems components if
primary versions become unavailable.
Q8: Key Features of the DR Plan
A: Clear delegation
Alert roster and notification
Employee check-in systems
Verified Answers
Q1: Introduction
A: •An organization should operate on the premise that it is only a matter of time until a
disaster strikes.
•Only through meticulous preparation and ongoing diligence can an organization
properly respond when a disaster occurs.
Q2: Facing Key Challenges
A: •Part of the challenge with disaster planning is that disasters are not confined to the IT
department, nor are they limited to the information assets of an organization.
•Frequently, a disaster is widespread enough to affect multiple departments and levels of
authority in the organization, as well as the community that comprises the organization,
including the organization's customers and suppliers.
•During a disaster services outside the organization may also be affected..
•A seemingly routine event can quickly spin out of control, creating a worst-case
scenario.
•This situation could result in service disruptions for weeks or months, requiring a
government to declare a state of emergency.
•Even if people are not confined to their homes, only some of an organization's
employees may be available for work, as happened during the 2020 COVID-19
pandemic.
•Organizations must communicate to their employees what is expected of them during a
disaster.
Q3: Depending on the scope of the disaster, implementing the DR
plan typically involves the following phases, which may or may
not overlap with the BC plan
A: •Preparation
•Response
•Recovery
•Restoration
•Resumption
Q4: Preparation: Training the DR Team and the Users
A: The planning and rehearsal necessary to respond to a disaster
•In DR planning there is no prevention phase because the vast majority of disasters
cannot be prevented.
•However, some organizations can minimize the probability of being hit with certain
disasters by preparing for them.
•Preparation means making an organization ready for possible contingencies that can
escalate to become disasters.
•This includes the development of the BIA, the organizing and staffing of the various
, teams necessary to assist in DR, and the development of the DR plan, which focuses DR
efforts if a disaster strikes.
Q5: Plan Distribution
A: •How the plan is distributed is not as important as making sure that all personnel have
access to the plan, have fully read it, and understood it.
•In order to cover all bases, password-protected copies of critical contingency plans
should be stored wherever employees may need access to them.
•This means the plans must be stored
•At the office—Physical copies in the employees' offices, electronic copies on all
organizational computer systems.
•Away from the office—Physical copies in employees' homes, electronic copies available
on home systems.
•Online (anytime, anywhere)—Electronic copies stored online.
Q6: Plan Triggers and Notification
A: •The preparation phase is a continuous one; however, other phases are activated by
triggers that can originate from a number of sources, including
•Management notification
•Employee notification
•Emergency management notification
•Local emergency services
•Media outlets
Q7: Disaster Recovery Planning as Preparation
A: •Developing an effective DR plan is the cornerstone of preparation.
•The primary goals of the DR plan are to
1.Eliminate or reduce the potential for injuries, loss of human life, damage to facilities, and
loss of assets and records.
2.Immediately invoke the emergency provisions of the DR plan to stabilize the effects of
the disaster, allowing for appropriate assessment and the beginning of recovery efforts.
3.Implement the procedures contained in the DR plan according to the type and impact
of the disaster.
•To plan for disaster, the CP team engages in scenario development and impact analysis,
which categorizes the level of threat that each potential disaster poses.
•Everyone assigned to the DR team should be aware of their duties during a disaster.
•Mitigation of impact is the inclusion of action steps to minimize the disaster's damage on
the operations of the organization.
•Plans should include alternative implementations for various systems components if
primary versions become unavailable.
Q8: Key Features of the DR Plan
A: Clear delegation
Alert roster and notification
Employee check-in systems
