Operational Procedures Flashcards by Alexander Balfour

Define Standard Operating Procedures (SOP):

Set of instructions that outline how to perform a specific task

How well did you know this?

Not at all

Perfectly

What is an Service-level Agreement?

SLA is a contract between a service provider and a customer. E.g. service levels, performance metrics, etc.

How well did you know this?

Not at all

Perfectly

What are incident reports?

Document used to record unexpected events and accidents

How well did you know this?

Not at all

Perfectly

What are workflows?

List of steps that must be done to achieve a goal

How well did you know this?

Not at all

Perfectly

What are CMDB?

Configuration Management Databases, used for advanced asset management.

How well did you know this?

Not at all

Perfectly

What should we have whenever we want to implement change in a system?

Backup plan/rollback

How well did you know this?

Not at all

Perfectly

What is included in a change management form?

Responsible staff members
Purpose of the change
Scope of the change
Change type
Date and time

How well did you know this?

Not at all

Perfectly

What is a standard change?

Low-risk change that’s preapproved and follows documented repeatable tasks.

How well did you know this?

Not at all

Perfectly

What is a normal change?

An intermediary-risk change that is not urgent or pre-approved

How well did you know this?

Not at all

Perfectly

What is a emergency change?

Urgent change that may present high risks if not addressed promptly

How well did you know this?

Not at all

Perfectly

What are change freezes?

Periods of the year where change is not allowed

How well did you know this?

Not at all

Perfectly

Define RTO:

Recovery Time Objective. Maximum tolerable length of time that system can be down

How well did you know this?

Not at all

Perfectly

Define RPO:

Recovery Point Objective. Maximum acceptable amount of data loss measured in time

How well did you know this?

Not at all

Perfectly

What is a full backup?

Backup everything!

How well did you know this?

Not at all

Perfectly

What are incremental backups?

An initial full backup and then second backup contains only the changes since last backup and third and fourth…

How well did you know this?

Not at all

Perfectly

What are differential backup?

Full backup initially. Next backups contain all data changes since last FULL backup

How well did you know this?

Not at all

Perfectly

What are synthetic backups?

Create a full backup and then create incremental backups which are merged with the full backup

How well did you know this?

Not at all

Perfectly

What are the two restore options?

Restore in-place (overwrite current system)
Restore on an alternative location

How well did you know this?

Not at all

Perfectly

What is the 3-2-1 backup rule?

There should be THREE copies of data
- Original and at least 2 backup copies
TWO different media types
- Hard drives and cloud storage
ONE copy must be offsite

How well did you know this?

Not at all

Perfectly

What is the Grandfather-Father-Son (GFS) backup strategy?

Grandfathers
Full monthly backups
Fathers
Fuller weekly backups
Sons
Daily incremental / differential backups

How well did you know this?

Not at all

Perfectly

Where should electronic components be stored?

Regulated environments (10-27C / 50-80F). Avoid humidity

How well did you know this?

Not at all

Perfectly

What fire extinguisher should you use for fires in IT?

Class C

How well did you know this?

Not at all

Perfectly

What is the Material Safety Data Sheet (MSDS)?

Document that lists health and safety information for substances inside a product

How well did you know this?

Not at all

Perfectly

What does high humidity promote in IT equipment?

Condensation

How well did you know this?

Not at all

Perfectly

What does low humidity promote in IT equipment?

Static discharges

What is the standard humidity for IT equipment?

45-55%

What are surge suppressors/protectors?

Devices that absorb power spikes and filters noise

What is chain of custody?

Record everyone who has touched a piece of evidence

What should be included in an incident report?

How the issue was identified and information of the incident

What is order of voltality?

How long does a piece of data stick around before it disappears.

What is a perpetual license model?

Pay once and you can use this version of the software. You own the software

What types of licensing are there?

- Per seat - Per concurrent user - Per server - Per server - A mix of all of the above

What is open-source software?

Software that is available for free, and the creators published the source code.

What are some examples of regulated data?

- Credit card information - Patient information - Social security numbers - Passport numbers

What is GDPR?

Protects the security and privacy of data

What is HIPAA?

IT standard for healthcare, and how health data is manged/secured

What is the The National Institute of Standards and Technology (NIST)?

Compliance for working with American state and data regarding them

What is PCI-DSS standard?

Payment of financial standard on how to handle financial information

What is Acceptable Use Policy (AUP)?

Set of rules and guidelines that define how employees use company resources

What is a splash screen?

Displays information to uses e.g. when they log in

What are the scripting types?

- PowerShell - Batch - VBScript - Shell Script - JavaScript - Python

What is the PowerShell file type?

.ps1

What is the batch file type?

.bat

What is the VBSScript file type?

.vbs

What is the Shell script file type?

.sh

What is the JavaScript file type?

.js

What are scripting use cases?

- Installation of applications - Backups - Gathering information/reporting - Mapping of network drives - Initiating updates - Restarting machines

What are batch scripts useful for?

Automating command-line tasks using simple commands

What is powershell used for?

Manging windows environments.

What is VBScripts used for?

Visual Basic scripts for Windows automation and web scripting

What are Shell scripts used for?

Executing/automating commands in Linux/Unix environments.

What is JavaScript used for?

Runs scripts for web pages, servers, or automation with many frameworks

What is Python used for?

Scripts execute versatile programming tasks, from automation to web development

What are the dangers of using scripts you don't understand?

- Change system settings by accident - Unintentionally introduce malware - Crash systems due to mishandling of resources

What is a remote desktop connection?

Connect to another desktop/server and have full control

What is Virtual Network Computing (VNC)?

- Cross platform remote desktop connections - Uses Remote Frame Buffer protocol

What is SSH used for?

Linux systems

What is Remote Monitoring and Management (RMM)?

Tools and software used to remotely monitor and troubleshoot devices

What is Simple Protocol for Independent Computing Environments (SPICE)?

Remote display protocol designed for Virtual Desktop infrastructure solutions. Alternative for RDP for Linux-based environments

What is Windows Remote Management (WinRM)?

Enables admins to remotely manage Windows devices using command-line tools.

What are security risks for RDP?

- Brute Force Attacks - Exposed RP ports - Weak authentication can lead to data leaks

What is the security risk of Virtual Network Computing (NVC)?

Lack of built-in encryption in many versions. Man-in-middle attacks

What is a best practice for Remote desktop protocols/connections?

- Change default port - Use VPNs or firewalls - Strong passwords - If it's not needed don't enable it

When should you use SPICE?

ONLY in trusted networks

What are the security risks of Windows Remote Management (WinRM)?

Can be exploited if exposed to internet

What are AI hallucinations?

False or misleading information that appears plausible but is not based on real data

What is AI Bias?

Systematic errors caused by imbalanced or prejudiced training data.

Operational Procedures Flashcards

(67 cards)