ITSS 4370 Final Exam Questions with Correct Answers Latest Update 2025-2026
Crisis Communication (DRI) - Answers Knowing who to call if an incident occur internally and externally
Business Impact Analysis (DRI) - Answers process to determine the potential effects of an interruption to
critical business operations as a result of a disaster, accident or emergency.
awareness of training program (DRI) - Answers Where you go out and educate your people about
business continuity and disaster recovery.
Risk assessment (DRI) - Answers The goal of this requirement is to establish, implement, and maintain a
formal documented risk assessment process that systematically identifies, analyzes, and evaluates the
risk of disruptive incidents to the organization.
Incident Response - Answers Develop and assist with the implementation of an incident management
system that defines organizational roles, lines of authority and succession of authority.
Define requirements to develop and implement the entity's incident response plan.
Ensure that incident response is coordinated with outside organizations in a timely and effective manner
when appropriate.
Five characteristics of cloud - Answers 1. On-demand self-service
2. Broad network access
3. Resource pooling
4. Rapid elasticity
5. Measured service
Software as a Service (SaaS) - Answers a model of software deployment where an application is hosted
as a service provided to customers across the Internet.
Platform as a Service (PaaS) - Answers A cloud service in which consumers can install and run their own
specialized applications on the cloud computing network.
Infrastructure as a Service (IaaS) - Answers computing resources where the consumer is able to deploy
and run arbitrary software, which can include operating systems and applications. The consumer does
not manage or control the underlying cloud infrastructure but has control over operating systems,
storage, and deployed applications; and possibly limited control of select networking components (e.g.,
host firewalls)
Four deployment models - Answers 1. Private Cloud
2. Community Cloud
, 3. Public Cloud
4. Hybrid Cloud
Private Cloud - Answers The cloud infrastructure is provisioned for exclusive use by a single organization
comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the
organization, a third party, or some combination of them, and it may exist on or off premises.
Community cloud - Answers The cloud infrastructure is provisioned for exclusive use by a specific
community of consumers from organizations that have shared concerns (e.g., mission, security
requirements, policy, and compliance considerations). It may be owned, managed, and operated by one
or more of the organizations in the community, a third party, or some combination of them, and it may
exist on or off premises.
Public cloud - Answers The cloud infrastructure is provisioned for open use by the general public. It may
be owned, managed, and operated by a business, academic, or government organization, or some
combination of them. It exists on the premises of the cloud provider.
Hybrid cloud - Answers The cloud infrastructure is a composition of two or more distinct cloud
infrastructures (private, community, or public) that remain unique entities, but are bound together by
standardized or proprietary technology that enables data and application portability (e.g., cloud bursting
for load balancing between clouds).
Which one deployment model did we talked about least in class? - Answers Community cloud
Service Level Part One: application focused - Answers Services, Application, Development
Service Level Part Two: infrastructure focused - Answers Platform, Storage, Hosting
Configuring cloud services - Answers An availability zone is a distinct location within a region and is
insulated from failures in any other zone.
- By running multiple AMIs across several zones,you can protect your databases and applications from a
single point of failure. Each zone has its own power sources and cooling and are designed to be
insulated from floods and fires.
- Amazon Machine Image(AMI)is a virtual machine with your chosen operating system and applications
bundled together.
-Availability Zones are logical identifiers and are unique to an account. That means that two people who
map to the same zone name may not actually be running in the same physical location.
Data Tiering - Answers Tiering allows us to control where (how) data is going to be stored based on
performance, cost, availability, and recovery requirements
Crisis Communication (DRI) - Answers Knowing who to call if an incident occur internally and externally
Business Impact Analysis (DRI) - Answers process to determine the potential effects of an interruption to
critical business operations as a result of a disaster, accident or emergency.
awareness of training program (DRI) - Answers Where you go out and educate your people about
business continuity and disaster recovery.
Risk assessment (DRI) - Answers The goal of this requirement is to establish, implement, and maintain a
formal documented risk assessment process that systematically identifies, analyzes, and evaluates the
risk of disruptive incidents to the organization.
Incident Response - Answers Develop and assist with the implementation of an incident management
system that defines organizational roles, lines of authority and succession of authority.
Define requirements to develop and implement the entity's incident response plan.
Ensure that incident response is coordinated with outside organizations in a timely and effective manner
when appropriate.
Five characteristics of cloud - Answers 1. On-demand self-service
2. Broad network access
3. Resource pooling
4. Rapid elasticity
5. Measured service
Software as a Service (SaaS) - Answers a model of software deployment where an application is hosted
as a service provided to customers across the Internet.
Platform as a Service (PaaS) - Answers A cloud service in which consumers can install and run their own
specialized applications on the cloud computing network.
Infrastructure as a Service (IaaS) - Answers computing resources where the consumer is able to deploy
and run arbitrary software, which can include operating systems and applications. The consumer does
not manage or control the underlying cloud infrastructure but has control over operating systems,
storage, and deployed applications; and possibly limited control of select networking components (e.g.,
host firewalls)
Four deployment models - Answers 1. Private Cloud
2. Community Cloud
, 3. Public Cloud
4. Hybrid Cloud
Private Cloud - Answers The cloud infrastructure is provisioned for exclusive use by a single organization
comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the
organization, a third party, or some combination of them, and it may exist on or off premises.
Community cloud - Answers The cloud infrastructure is provisioned for exclusive use by a specific
community of consumers from organizations that have shared concerns (e.g., mission, security
requirements, policy, and compliance considerations). It may be owned, managed, and operated by one
or more of the organizations in the community, a third party, or some combination of them, and it may
exist on or off premises.
Public cloud - Answers The cloud infrastructure is provisioned for open use by the general public. It may
be owned, managed, and operated by a business, academic, or government organization, or some
combination of them. It exists on the premises of the cloud provider.
Hybrid cloud - Answers The cloud infrastructure is a composition of two or more distinct cloud
infrastructures (private, community, or public) that remain unique entities, but are bound together by
standardized or proprietary technology that enables data and application portability (e.g., cloud bursting
for load balancing between clouds).
Which one deployment model did we talked about least in class? - Answers Community cloud
Service Level Part One: application focused - Answers Services, Application, Development
Service Level Part Two: infrastructure focused - Answers Platform, Storage, Hosting
Configuring cloud services - Answers An availability zone is a distinct location within a region and is
insulated from failures in any other zone.
- By running multiple AMIs across several zones,you can protect your databases and applications from a
single point of failure. Each zone has its own power sources and cooling and are designed to be
insulated from floods and fires.
- Amazon Machine Image(AMI)is a virtual machine with your chosen operating system and applications
bundled together.
-Availability Zones are logical identifiers and are unique to an account. That means that two people who
map to the same zone name may not actually be running in the same physical location.
Data Tiering - Answers Tiering allows us to control where (how) data is going to be stored based on
performance, cost, availability, and recovery requirements
