CYBR 4330 - Chapter 3 | UPDATED Questions with 100%
Verified Answers
Q1: Contingency planning (CP)
A: encompasses everything done by an organization to prepare for the unexpected
Q2: incident response (IR)
A: •focuses on detecting, evaluating, and reacting to an incident, with later phases of the
process focusing on keeping the business functioning even if the physical plant is
destroyed or unavailable.
Q3: business continuity plan (BC plan)
A: •When the IR process cannot contain and resolve an incident, the company turns to the
disaster recovery and THIS plans to help restore normal operations quickly at the primary
site or a new permanent site if the old one is no longer viable.
contains the steps for implementing critical business functions at an alternate internal or
external location until normal operations can be resumed at the primary site (or at a new
location).
occurs concurrently with the DR plan when the damage is major or long term
Q4: business resumption plan (BR plan)
A: two major elements
1. DR plan
2. BC plan
these are not indistinguishable
Q5: disaster recovery plan (DR plan)
A: lists and describes the efforts to resume normal operations at the primary places of
business
Q6: primary site
A: the location or group of locations at which the organization executes its functions
Q7: •Delayed data protection
•Real-time data protection
•Server recovery
•Application recovery
•Site recovery
A: five key mechanisms that help restore critical information and the continuation of
business operations
Q8: Data backup
, A: typically involves making a copy or snapshot of the data from a specific point in time
data = volatile, subject to change
For data recovery from an incident or disaster, this is the most common solution
Q9: data archive
A: •involves the long-term storage of a document or data file, usually for legal or regulatory
purposes.
Q10: online (or cloud) backup, disk backup, and tape backup
A: The most common varieties of data backup include
Q11: daily, weekly
A: In general, data files and critical system files should be backed up HOW OFTEN, with
nonessential files being backed up HOW OFTEN
Q12: retention schedule
A: All data storage that involves backups or archives should be based on this
•guides the location, frequency of replacement, and duration of storage.
Q13: formal policy and plan
A: •Management should create a WHAT that - with input from legal counsel - for conforming
to applicable laws, regulations, and standards.
•Data that is not covered by laws or regulations may even be in the organization's best
interest to quickly destroy.
Q14: one or two
A: for routine data backups of critical data, the org only needs to retain the blank or blank
most recent copies and at least blank off-site copy(ies)
Q15: one
A:
Q16: one
A: for full backups of entire systems, at least x copies should be stored in a secure location
bank
security deposit
remote branch
Q17: NIST SP 800-34
A: according to this, alternative should be considered when designing backup and recovery
strategies
=
, Q18: •establishing and operating costs,
•downtime estimates,
•estimates of the security provided by the option,
•how the option affects the sequence of recovery based on
the relative priority of included systems, and
•how the option fits into broader organizational planning
efforts.
A: Each backup and recovery option should contain planning for the total cost of operation,
including
Q19: online backup to a third-party data storage venro
A: one of the newest forms of data backup
this option offers multi-terabyte online data storage anywhere
Memeo, Dropbox, Google
Q20: data storage "int he cloud"
A: For the corporate user, this online data storage is sometimes referred to as
commonly associate with leasing of computing resources from a third party
Q21: cloud computing
A: originally described as the provision of three fundamental services
•Software as a Service (SaaS)
•Platform as a Service (PaaS)
•Infrastructure as a Service (IaaS)
Q22: Software as a Service (SaaS)
A: applications are made available on the Internet (and over the WWW)
orgs can lease this
often include online backup services
Q23: Platform as a Service (PaaS)
A: development platforms are made available to developers
Q24: Infrastructure as a Service (IaaS)
A: hardware and operating systems resources are made available for whatever the
organization desires to implement
Q25: •Public cloud
•Community cloud
•Private cloud
•A hybrid combination of the above
A: Clouds are deployed in the following ways
Verified Answers
Q1: Contingency planning (CP)
A: encompasses everything done by an organization to prepare for the unexpected
Q2: incident response (IR)
A: •focuses on detecting, evaluating, and reacting to an incident, with later phases of the
process focusing on keeping the business functioning even if the physical plant is
destroyed or unavailable.
Q3: business continuity plan (BC plan)
A: •When the IR process cannot contain and resolve an incident, the company turns to the
disaster recovery and THIS plans to help restore normal operations quickly at the primary
site or a new permanent site if the old one is no longer viable.
contains the steps for implementing critical business functions at an alternate internal or
external location until normal operations can be resumed at the primary site (or at a new
location).
occurs concurrently with the DR plan when the damage is major or long term
Q4: business resumption plan (BR plan)
A: two major elements
1. DR plan
2. BC plan
these are not indistinguishable
Q5: disaster recovery plan (DR plan)
A: lists and describes the efforts to resume normal operations at the primary places of
business
Q6: primary site
A: the location or group of locations at which the organization executes its functions
Q7: •Delayed data protection
•Real-time data protection
•Server recovery
•Application recovery
•Site recovery
A: five key mechanisms that help restore critical information and the continuation of
business operations
Q8: Data backup
, A: typically involves making a copy or snapshot of the data from a specific point in time
data = volatile, subject to change
For data recovery from an incident or disaster, this is the most common solution
Q9: data archive
A: •involves the long-term storage of a document or data file, usually for legal or regulatory
purposes.
Q10: online (or cloud) backup, disk backup, and tape backup
A: The most common varieties of data backup include
Q11: daily, weekly
A: In general, data files and critical system files should be backed up HOW OFTEN, with
nonessential files being backed up HOW OFTEN
Q12: retention schedule
A: All data storage that involves backups or archives should be based on this
•guides the location, frequency of replacement, and duration of storage.
Q13: formal policy and plan
A: •Management should create a WHAT that - with input from legal counsel - for conforming
to applicable laws, regulations, and standards.
•Data that is not covered by laws or regulations may even be in the organization's best
interest to quickly destroy.
Q14: one or two
A: for routine data backups of critical data, the org only needs to retain the blank or blank
most recent copies and at least blank off-site copy(ies)
Q15: one
A:
Q16: one
A: for full backups of entire systems, at least x copies should be stored in a secure location
bank
security deposit
remote branch
Q17: NIST SP 800-34
A: according to this, alternative should be considered when designing backup and recovery
strategies
=
, Q18: •establishing and operating costs,
•downtime estimates,
•estimates of the security provided by the option,
•how the option affects the sequence of recovery based on
the relative priority of included systems, and
•how the option fits into broader organizational planning
efforts.
A: Each backup and recovery option should contain planning for the total cost of operation,
including
Q19: online backup to a third-party data storage venro
A: one of the newest forms of data backup
this option offers multi-terabyte online data storage anywhere
Memeo, Dropbox, Google
Q20: data storage "int he cloud"
A: For the corporate user, this online data storage is sometimes referred to as
commonly associate with leasing of computing resources from a third party
Q21: cloud computing
A: originally described as the provision of three fundamental services
•Software as a Service (SaaS)
•Platform as a Service (PaaS)
•Infrastructure as a Service (IaaS)
Q22: Software as a Service (SaaS)
A: applications are made available on the Internet (and over the WWW)
orgs can lease this
often include online backup services
Q23: Platform as a Service (PaaS)
A: development platforms are made available to developers
Q24: Infrastructure as a Service (IaaS)
A: hardware and operating systems resources are made available for whatever the
organization desires to implement
Q25: •Public cloud
•Community cloud
•Private cloud
•A hybrid combination of the above
A: Clouds are deployed in the following ways
