IT Risks and Responses

Question 1

What is data encryption and the 2 types of data encryption?

Answer 1

• using a password or a digital key to scramble a readable (plaintext) message into an unreadable (ciphertext) message
• the intended recipient of the message then uses another digital key to decrypt or decipher the ciphertext back into plaintext
• the longer the length of the key, the less likely that the message or transaction will be decrypted by the wrong party

Symmetic encryption- the sender and the recipient use the same shared key

Asymmetric encryption- 2 keys are used; one is public and the other private

Question 2

What are digital certificates?

Answer 2

• electronic docs created and digitally signed by a trusted party and that certify the identity of the owners of a particular public key
• operate on a Public Key Infrastucture (PKI) which is the system and processes used to issue and manage asymmetric keys and digital certificates

Question 3

What is a full backup?

Answer 3

• an exact copy of the entire database
• are time consuming, so most orgs only do full back us weekly and supplement with daily partial backups

Question 4

What is an incremental backup?

Answer 4

• copying only the data that has changed since the last backup

Question 5

What is a differential backup?

Answer 5

• copies all changes made since the last full backup
• each new differential backup file contains the cumulative effects of all activity since the last full backup

Question 6

What is a Disaster Recovery Plan?

Answer 6

• an entity’s plans for restoring and continuing its information technology function in the event of the destruction of not only program and data files, but computer processing capability as well

Question 7

What is a Cold Site?

Answer 7

• an off site location that has all the electrical connections and other physical requirements for data processing, but is missing the actual equipment
• cheapest

Question 8

What is a Warm Site?

Answer 8

• has hardware installed but will fall short of the processing capabilities typically found in a hot site or at the actual business due to a lack of fully operational computer and office equipment

Question 9

What is a Hot Site?

Answer 9

• an off site location that is equipped to take over the company’s data processing and include the necessary hardware and office equipment to perform the functions of the org
• most expensive
• can restore info technology functions within a few hours of a disaster