2.5 Cybersecurity Resilience Flashcards

1
Q

Define 3 Common RAID levels

A
  1. RAID 0 - striping
  2. RAID 1 - mirroring
  3. RAID 5 - striping w/ parity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Define Multipath relative to disk redundancy

A

When using SAN or NAS, create multiple physical paths to maintain connectivity if a switch or fiber cable fails, for example

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Define Geographic Dispersal

A

Having redundant back up site(s) in different geographic areas to provide resilience when a disaster may affect a large area, such as hurricane in Florida taking out services at a city-wide level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define how a Load Balancer provides network resiliency

A

Load balancer distributes requests across multiple servers. If a server is down or a new one comes online the load balancer detects this and distributes requests accordingly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Define NIC Teaming and 2 benefits

A

Pooling multiple network cards to respond to network requests
Benefits
1. If a card or the switchport it is connected to goes down, the device maintains network connectivity
2. Increases the network bandwidth/throughput of the device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Name 3 types of UPS

A
  1. Offline or stand-by, only provides battery power when there is a total loss of power
  2. Line-Interactive, when incoming power level drops (brownout), it supplements with battery power to provide the expected power level
  3. Online: always provides power directly from batteries so that there is never an interruption when switching modes
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a major limitation of a UPS?

A

It can only provide power for a limited time based on the capacity of the battery and number of devices it powers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Define generator

A

It is a fuel sourced power supply that can run as long as fuel is provided

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Why is UPS still recommended when using a generator?

A

Because there is a delay before the generator(s) start providing power, usually wait 10-15 seconds before switching over

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define dual-power supply

A

2 identical power supplies that can individually provide all the power required by the device, often hot-swappable so that when one fails or is removed the function of the device is not interrupted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Define Managed PDU

A

Managed power distribution unit, has multiple interfaces to connect to different power sources for redundancy, can be remotely managed and monitored over the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Define SAN

A

Storage Area Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How does a SAN provide resiliency

A

Multiple front-ends can write to the SAN allowing continued function if a front-end system fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Define SAN replication

A

Redundant SANs can be setup so that data replicates between them, allowing continued function if one SAN fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Define 2 SAN replication models

A
  1. Real-time, data is copied to other SAN as soon it is written
  2. Snap-shot, data is replicated every x time frame, minimizing data loss if a SAN fails
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

2 Benefits of VM replication

A
  1. Updates only need to be made a “primary” VM and those changes are automatically pushed to other VM instances
  2. If a “primary” VM fails, it can be reproduced using from the instance(s) it is replicated to
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the advantage of using cloud-based services (vs local) for data replication?

A

Cloud-based is less expensive and capacity can be easily increased on-the-fly

18
Q

What are the disadvantages of using cloud-based services (vs local) for data replication?

A
  1. Bandwidth, depending on the amount of data bandwidth limitations might affect how quickly data can be replicated
  2. Security, data stored in cloud likely needs to be encrypted in case the cloud-provider is breached
19
Q

Define full-backup

A

Backs up everything on the system

20
Q

Define incremental backup

A

Only backs up files that have changed since the last backup, either full or incremental

21
Q

Define differential backup

A

Backs up everything that has changed since the last full back up

22
Q

What is required to perform a restore from an incremental backup?

A

The last full backup + every incremental backup since the last full backup

23
Q

What is required to perform a restore from an differential backup?

A

The last full backup + the last differential backup

24
Q

Distinguish between incremental and differential backups in terms of backup time, restore time, and size

A

Incremental backup: less time to backup, more time to restore, smaller backup sizes
Differential backup: more time to backup, less time to restore, larger backup size

25
Q

Define 3 attributes of tape backup

A
  1. Data access and writing is sequential, i.e. like a music tape where you have to fast-forward or rewind to find a certain song
  2. Tape sizes can range from 100GB to multiple terabytes for each cartridge
  3. Easily stored and transported offsite
26
Q

2 Advantages of hard drive backup over tape

A
  1. Faster read/write speed for creating backup and recovering
  2. Compression and deduplication allow for more efficient backups
27
Q

What is an image, in terms of system backup

A

It is an exact copy of an entire system at the time it is taken

28
Q

Name 2 differences between NAS and SAN

A
  1. NAS operates at file-level, so when a file is changed, the entire file is rewritten
    SAN operates at the block-level, so only the changed portions of a file are rewritten
  2. NAS typically appears to clients as a file share folder structure
28
Q

What are the 3 differences between NAS and SAN?

A
  1. NAS operates at file-level, so when a file is changed, the entire file is rewritten
    SAN operates at the block-level, so only the changed portions of a file are rewritten
  2. NAS typically appears to clients as a file share folder structure
    SAN appears a “drive” to clients
  3. NAS is typically connected to network via Ethernet
    SAN typically uses Fibre-channel
29
Q

Define cloud-based backup and provide 2 primary concerns

A
  1. Allow many systems to be backed up to an offsite location
  2. Bandwidth limitations may be an issue for how quickly data can be backed up/restored
  3. Security during transmission and storage is a consideration
30
Q

Offline vs On-Line backup

A

Offline backup is typically a fast backup to a dedicated device that typically allows offsite transfer of media
Online backup is typically done in near real-time as files are modified, typically to a cloud-based service

31
Q

Define non-persistence relevant to resiliency

A

Application instances in the cloud can be constantly added & removed based on demand, they are non-persistent

32
Q

Define snapshot relative to resiliency

A

Snapshot is a backup of an application instance at specific moment, can be used to restore or revert an application instance

33
Q

What 3 restore options do snapshots provide?

A
  1. Revert to a previous configuration/state
  2. Revert to last known good configuration/state
  3. Live boot from external media
34
Q

How can VM-based applications provide high-availability and scalability?

A

Cloud-based VM solutions provide the ability to either have multiple live instances running or the ability to quickly spin-up additional instances

35
Q

How is restoration order relevant to resiliency?

A

Systems have to be restored in a specific order, for example, the database used by an application should be restored before the application is restored

36
Q

How does diversity in technologies contribute to resiliency?

A

Using different technologies reduces the exposure of an outage caused by a vulnerability in a specific technology, i.e. zero-day attack

37
Q

How does diversity in vendors contribute to resiliency?

A

Reduces the risk of security vulnerability specific to a certain vendor’s products and diversifies obtaining support for the products

38
Q

Define diversity in cryptography

A

Using different cryptography and certificate authorities reduces the risk exposure if one is compromised

39
Q

Define diversity in controls

A

Diversity in security controls, i.e. network equipment in a key-pad secured area + password required to login to equipment, aka defense in depth