CYBR 4330 - Chapter 9 | UPDATED Questions with 100%
Verified Answers
Q1: Disaster recovery planning (DRP)
A: •While the organization's chief operations officer (COO) is generally responsible for the
overall DR effort, the IT community of interest, under the leadership of the CIO, is usually
given responsibility for the IT aspects of DR planning, as they are keenly interested in
keeping IT systems available during and immediately following disasters.
preparation for and recovery from a disaster, whether natural or man-made
•The most common way is to separate natural disasters, from man-made disasters.
Some events are immediately classified as disasters
CPMT forms DR teeam then assists in the development of the DR plan
Q2: Incident is categorized as a disaster when
A: the level of damage is so severe that org can't quickly recover
Q3: key role of a DR plan
A: defining how to reestablish operations at the location where the org is usually located
Q4: •The most common way is to separate natural disasters, from
man-made disasters.
A: Man-made: acts of terrorism, acts of war, and those acts of man that begin as incidents
and escalate into disasters
Q5: Rapid-onset disasters
A: include earthquakes, floods, storm winds, tornadoes, and mud flows,
Q6: slow-onset disasters
A: include droughts, famines, environmental degradation, desertification, deforestation, and
pest infestation.
Q7: DR team
A: assmbled by CPMT
IT, InfoSec, outside people
reestablishment of business operations at primary site
leads DR process when disaster is declared
•Key considerations in developing the DR team include its organization, the planning
needed to identify essential documentation and equipment, and training and rehearsal so
the team is able to perform when needed.
•The nature of the organization may influence the composition of DR teams.
Q8: Organization of the DR Team
, A: •The DR team consists of a team leader, who is also a member of the CPMT, and
representatives from every major organizational unit, including
•Senior management
•Operations
•Corporate support units (esp. HR, legal, and accounting)
•Facilities
•Fire and safety
•Maintenance staff
•IT technical staff, including database, systems, and networking
•IT managers
•InfoSec technicians
•InfoSec managers
Important that DR team members do not serve with either IR team or BC team, as duties
may overlap
Q9: •Depending on the size of the organization, there may be
many subteams within the DR team, such as
A: •Disaster Management Team - command-and-control
•Communications Team - PR & Legal
•Computer Recovery (Hardware) Team - physical assets
•Systems Recovery (OS) Team - operating systems
•Network Recovery Team - network wiring and hardware
•Storage Recovery Team - SANS/NAS/backup hardware
•Applications Recovery Team - applications
•Data Management Team - Data/databases, backups & recovery
•Vendor Contact Team - suppliers/vendors
•Damage Assessment and Salvage Team - site recovery
•Business Interface Team - internal coordination
•Logistics Team - supplies & materials
Other Teams as Needed
Q10: Special Documentation and Equipment
A: •All members of the DR team should have multiple copies of the DR and BC plans in their
homes, vehicles, and offices, as they cannot predict when they will receive an emergency
call and be required to activate the plans.
•Organizations must have a plan to manage distribution of these documents as they are
updated so out-of-date versions are replaced in all locations where they are staged.
•It is also important for the responsible team members to have access to certain DR
materials should the need arise (e.g. recovery supplies and technologies).
Equipment listed on 376
DR software
Redunant HW
Blueprint copies
Phone numbers
Emergency supplies
Q11: Disaster Recovery Planning Functions
Verified Answers
Q1: Disaster recovery planning (DRP)
A: •While the organization's chief operations officer (COO) is generally responsible for the
overall DR effort, the IT community of interest, under the leadership of the CIO, is usually
given responsibility for the IT aspects of DR planning, as they are keenly interested in
keeping IT systems available during and immediately following disasters.
preparation for and recovery from a disaster, whether natural or man-made
•The most common way is to separate natural disasters, from man-made disasters.
Some events are immediately classified as disasters
CPMT forms DR teeam then assists in the development of the DR plan
Q2: Incident is categorized as a disaster when
A: the level of damage is so severe that org can't quickly recover
Q3: key role of a DR plan
A: defining how to reestablish operations at the location where the org is usually located
Q4: •The most common way is to separate natural disasters, from
man-made disasters.
A: Man-made: acts of terrorism, acts of war, and those acts of man that begin as incidents
and escalate into disasters
Q5: Rapid-onset disasters
A: include earthquakes, floods, storm winds, tornadoes, and mud flows,
Q6: slow-onset disasters
A: include droughts, famines, environmental degradation, desertification, deforestation, and
pest infestation.
Q7: DR team
A: assmbled by CPMT
IT, InfoSec, outside people
reestablishment of business operations at primary site
leads DR process when disaster is declared
•Key considerations in developing the DR team include its organization, the planning
needed to identify essential documentation and equipment, and training and rehearsal so
the team is able to perform when needed.
•The nature of the organization may influence the composition of DR teams.
Q8: Organization of the DR Team
, A: •The DR team consists of a team leader, who is also a member of the CPMT, and
representatives from every major organizational unit, including
•Senior management
•Operations
•Corporate support units (esp. HR, legal, and accounting)
•Facilities
•Fire and safety
•Maintenance staff
•IT technical staff, including database, systems, and networking
•IT managers
•InfoSec technicians
•InfoSec managers
Important that DR team members do not serve with either IR team or BC team, as duties
may overlap
Q9: •Depending on the size of the organization, there may be
many subteams within the DR team, such as
A: •Disaster Management Team - command-and-control
•Communications Team - PR & Legal
•Computer Recovery (Hardware) Team - physical assets
•Systems Recovery (OS) Team - operating systems
•Network Recovery Team - network wiring and hardware
•Storage Recovery Team - SANS/NAS/backup hardware
•Applications Recovery Team - applications
•Data Management Team - Data/databases, backups & recovery
•Vendor Contact Team - suppliers/vendors
•Damage Assessment and Salvage Team - site recovery
•Business Interface Team - internal coordination
•Logistics Team - supplies & materials
Other Teams as Needed
Q10: Special Documentation and Equipment
A: •All members of the DR team should have multiple copies of the DR and BC plans in their
homes, vehicles, and offices, as they cannot predict when they will receive an emergency
call and be required to activate the plans.
•Organizations must have a plan to manage distribution of these documents as they are
updated so out-of-date versions are replaced in all locations where they are staged.
•It is also important for the responsible team members to have access to certain DR
materials should the need arise (e.g. recovery supplies and technologies).
Equipment listed on 376
DR software
Redunant HW
Blueprint copies
Phone numbers
Emergency supplies
Q11: Disaster Recovery Planning Functions