Domain 7 Test Notes

Question 1

Any event that stops, prevents, or interrupts an organization’s ability to perform its work task.

Answer 1

Diasater

Question 2

Anything caused by nature, this could be earthquakes, floods, snow, tornados.

Answer 2

Natural Disaster

Question 3

Anything caused by humans, they can be intentional or unintentional

Answer 3

Human Disaster

Question 4

Anything in our environment, could be power outage/spikes, hardware failures, provider issues

Answer 4

Environmental Disaster

Question 5

An observable change in state, is neither negative nor positive. Examples- system powered on or an application started

Answer 5

Event

Question 6

Triggers warning if certain event happens.. Examples - traffic utilization above 75% or Memory usage at 90% for more than 2 minutes.

Answer 6

Alert

Question 7

Multiple adverse events happening on a system or network

Answer 7

Incident

Question 8

CISSP Incident Management Steps

Answer 8

Detection
Response
Mitigation
Reporting
Recovery
Remediation
Lesson Learned
DRMRRRL

Question 9

Is one of the simplest tests to conduct. Managers and functional areas go through the plan to check a list of components needed for the recovery process

Answer 9

Read-Through (Checklist)

Question 10

Members of the disaster recovery team gather and role play a disaster scenario. Also called tabletop exercise

Answer 10

Structured Walk-Through

Question 11

The disaster recovery team is presented with a scenario and asked to develop an appropriate response. Some of the responses may be tested.

Answer 11

Simulation Test

Question 12

Critical components are brought up at a secondary site using backups while the same systems are up at the primary site.

Answer 12

Parallel Test

Question 13

All operations are interrupted at the primary site and shifted to the recovery site.

Answer 13

Full Interruption Test

Question 14

Called Striping. It uses 2 or more disks and improves the disk subsystem performance, doesn’t provide fault tolerance

Answer 14

RAID -0

Question 15

Called Mirroring. It uses 2 disks, which both hold the same data. If one disk fails, the other disk includes the data so that the system can continue to operate.

Answer 15

RAID-1

Question 16

Called Striping with parity. It uses 3 or more disks with the equivalent of one disk holding parity information which allows the reconstruction of data through calculations if a single disk is lost.

Answer 16

RAID-5

Question 17

Called stripe of mirrors. It is configured as two or more mirrors with each mirror configured in a striped configuration. It uses at least 4 disks. There has to be an even number of disks.

Answer 17

RAID-10

Question 18

Database backups are moved to a remote site using bulk transfers.

Answer 18

Electronic Vaulting

Question 19

Data transfers are performed in a more expeditious manner. Data transfers still occur in a bulk transfer mode but they occur on a more frequent basis usually once every hour.

Answer 19

Remote Journaling

Question 20

a live database server is maintained at the backup site. The remote server receives copies of the database modifications at the same time they are applied to the production server at the primary site

Answer 20

Remote Mirroring

Question 21

Backups everything regardless of the setting of the archive bit. The archive bit is reset, turned off, or set to 0

Answer 21

Full Backup

Question 22

Backups only those files that have been modified since the time of the most recent full or incremental backup. The archive bit is reset, turned off, or set to 0 after this backup runs. Faster to backup but need more tapes to restore.

Answer 22

Incremental Backup

Question 23

Backup all files that have been modified since the time of the more recent full backup. Don’t clear the archive bit. Backups take more time to run but require less tapes to restore.

Answer 23

Differential Backup

Question 24

A full backup that doesn’t clear the archive bit. Often performed before system updates, patches, etc

Answer 24

Copy Backup

Question 25

How long a new or repaired system or component will function on average before failing

Answer 25

Mean Time Between Failures (MTBF)

Question 26

How long it will take to recover a failed system

Answer 26

Mean Time to Repair (MTTR)

Question 27

The acceptable amount of data that can not be recovered

Answer 27

Recovery Point Objective (RPO)

Question 28

The time to rebuild the system and configure it for reinsertion into production. The amount of time the organization can survive without without an asset or process.

Answer 28

Maximum Tolerable Downtime (MTD)

Question 29

The amount of time to restore the system (hardware)

Answer 29

Recovery Time Objective

Question 30

A basic change management process where users request changes, which are then analyzed for cost/benefit by managers and prioritized by developers for implementation.

Answer 30

Request Control

Question 31

A basic change management process where developers recreate issues, develop solutions in a controlled environment, ensure quality, and document changes before deployment.

Answer 31

Change Control

Question 32

A basic change management process where changes are approved, any temporary code is removed, and only vetted changes are released to production after acceptance testing.

Answer 32

Release Control

Question 33

The rule states that when an agreement between two parties is put into written form, it is assumed to be the entire agreement unless amended in writing.

Answer 33

Parol evidence