CYBR 4330 Exam Questions with Correct Answers

CYBR 4330 Exam Questions with Correct Answers Disaster recovery planning (DRP) - Answer-•While the organization's chief operations officer (COO) is generally responsible for the overall DR effort, the IT community of interest, under the leadership of the CIO, is usually given responsibility for the IT aspects of DR planning, as they are keenly interested in keeping IT systems available during and immediately following disasters. preparation for and recovery from a disaster, whether natural or man-made •The most common way is to separate natural disasters, from man-made disasters. Some events are immediately classified as disasters CPMT forms DR teeam then assists in the development of the DR plan Incident is categorized as a disaster when - Answer-the level of damage is so severe that org can't quickly recover key role of a DR plan - Answer-defining how to reestablish operations at the location where the org is usually located •The most common way is to separate natural disasters, from man-made disasters. - Answer-Man-made: acts of terrorism, acts of war, and those acts of man that begin as incidents and escalate into disasters Rapid-onset disasters - Answer-include earthquakes, floods, storm winds, tornadoes, and mud flows, slow-onset disasters - Answer-include droughts, famines, environmental degradation, desertification, deforestation, and pest infestation. DR team - Answer-assmbled by CPMT IT, InfoSec, outside people reestablishment of business operations at primary site leads DR process when disaster is declared •Key considerations in developing the DR team include its organization, the planning needed to identify essential documentation and equipment, and training and rehearsal so the team is able to perform when needed. •The nature of the organization may influence the composition of DR teams. Organization of the DR Team - Answer-•The DR team consists of a team leader, who is also a member of the CPMT, and representatives from every major organizational unit, including: •Senior management •Operations •Corporate support units (esp. HR, legal, and accounting) •Facilities •Fire and safety •Maintenance staff •IT technical staff, including database, systems, and networking •IT managers •InfoSec technicians •InfoSec managers Important that DR team members do not serve with either IR team or BC team, as duties may overlap •Depending on the size of the organization, there may be many subteams within the DR team, such as: - Answer-•Disaster Management Team - command-and-control •Communications Team - PR & Legal •Computer Recovery (Hardware) Team - physical assets •Systems Recovery (OS) Team - operating systems •Network Recovery Team - network wiring and hardware •Storage Recovery Team - SANS/NAS/backup hardware •Applications Recovery Team - applications •Data Management Team - Data/databases, backups & recovery •Vendor Contact Team - suppliers/vendors •Damage Assessment and Salvage Team - site recovery •Business Interface Team - internal coordination •Logistics Team - supplies & materials Other Teams as Needed Special Documentation and Equipment - Answer-•All members of the DR team should have multiple copies of the DR and BC plans in their homes, vehicles, and offices, as they cannot predict when they will receive an emergency call and be required to activate the plans. •Organizations must have a plan to manage distribution of these documents as they are updated so out-of-date versions are replaced in all locations where they are staged. •It is also important for the responsible team members to have access to certain DR materials should the need arise (e.g. recovery supplies and technologies). Equipment listed on 376 - DR software - Redunant HW - Blueprint copies - Phone numbers - Emergency supplies Disaster Recovery Planning Functions - Answer-•Although policies may differ from company to company, the first step in the effort to craft any contingency plan is the development of enabling policies.