Domain 7 : Backups

Question 1

Each employee is assigned a small number of other employees that they are responsible for calling in an emergency event

Answer 1

Call Trees

Question 2

Command post established during or just after an emergency event

Answer 2

Emergency Operations Center (EOC)

Question 3

Any data accessed through reading or writing on paper rather than a computer system

Answer 3

Hardcopy data

Question 4

Archives stored electronically can be retrieved in case of disruptive event or disaster

Answer 4

Electronic backups

Question 5

• Only files that have been modified since the most recent backup (full or incremental) are stored
• Resets the archive bit

Answer 5

Incremental backups

Question 6

• Stores all files that have been modified since the time of the most recent full backup
• Will not reset the archive bit, each successive backup will be larger than the previous
• Longest time to restore requires both full backup and ____ backup

Answer 6

Differential backups

Question 7

• Tape rotation method

- You will use each tape in order and cycle back to the first tape after the 14th is used

Answer 7

First In, First Out (FIFO)

Question 8

Batch process where entire database backup files are transferred, to an offsite facility

Answer 8

Electronic Vaulting

Question 9

A log containing all database transactions (aka snapshot)

Answer 9

Database journal

Question 10

• Saves database checkpoints and database journal to a remote site
• Transfers happen more frequently i.e. every hour and are incremental

Answer 10

Remote journaling

Question 11

• Two are more identical databases that are updated simultaneously
• Best practice to host one _______ database offsite

Answer 11

Database shadowing aka Remote mirroring

Question 12

• DRP test
• Copies of the DRPs are distributed to members of the team for review
• Ensures that key personnel are aware of their responsibilities
• Provides opportunity to update any obsolete info found
• Identifies personnel who have left the company and their responsibilities need to be reassigned

Answer 12

Read-through test

Question 13

• DRP test
• Members of the team gather in a large conference and role play a disaster scenario
• DRP is used as reference during this exercise

Answer 13

Structured Walkthrough test / tabletop

Question 14

• DRP test
• Team members are given a disaster scenario and asked to develop a response
• Some of these responses are then tested, may involve interruption of noncritical business activities

Answer 14

Simulation test / walkthrough drill

Question 15

• DRP test
• Employees relocate to the alternate recovery site and perform their disaster recovery responsibilities as they would in an emergency
• Operations at the main site are not interrupted

Answer 15

Parallel test

Question 16

• DRP test
• Organization will stop processing normal business operations at primary locations and will instead switch over to the alternate site

Answer 16

Full interruption test

Question 17

List some common BCP/DRP mistakes

Answer 17

• Lack of management support
• Lack of business unit involvement
• Lack of prioritization among critical staff
• Improper (often overly narrow) scope
• Inadequate telecommunications management
• Inadequate supply chain management
• Incomplete or inadequate CMP
• Lack of testing
• Lack of training and awareness
• Failure to keep the BCP/DRP plan up to date

Question 18

BCP/DRP framework geared towards the federal government but can also be referenced for private sector too

Answer 18

NIST SP 800-34

Question 19

Published a six-step Good Practice Guidelines (GPG) for BCP

Answer 19

Business Continuity Institute (BCI)

Question 20

• Enables backup programs to determine which files need to be backed up
• When a file is created or modified, this is turned on so that file will be included in the next backup operation

Answer 20

Archive bit