Chapter 14 - Business Continuity

Question 1

Business continuity

Answer 1

The ability of an organization to maintain its operations and services in the face of a disruptive event.

Question 2

Single point of failure

Answer 2

A component or entity in a system which, if it no longer functions, would adversely affect the entire system.

Question 3

High availability

Answer 3

A system that can function for an extended period of time with little downtime.

Question 4

Mission-essential function

Answer 4

The activity that serves as the core purpose of the enterprise.

Question 5

Disaster recovery plan (DRP)

Answer 5

A written document that details the process for restoring IT resources following an event that causes a significant disruption in service.

Question 6

Fault tolerance

Answer 6

A systems ability to deal with malfunctions.

Question 7

Redundancy

Answer 7

The use of duplicated equipment to improve the availability of the system.

Question 8

Mean time to recovery (MTTR)

Answer 8

The average time for a device to recover from a failure that is not a terminal failure

Question 9

Mean time between failures (MTBF)

Answer 9

A statistical value that is the average time until a component fails, cannot be repaired, and must be replaced.

Question 10

Redundant Array of Independent Drives (RAID)

Answer 10

A technology that uses multiple hard disk drives for increased reliability and performance.

Question 11

Hot site

Answer 11

A duplicate of the production site that has all the equipment needed for an organization to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.

Question 12

Cold site

Answer 12

A remote site that provides office space; the customer must provide and install all the equipment needed to continue operations.

Question 13

Warm site

Answer 13

A remote site that contains computer equipment but does not have active internet or telecommunication facilities, and does not have backups of data.

Question 14

Data backup

Answer 14

The process of copying information to a different medium and storing it at an offsite location so that it can be used in the event of a disaster.

Question 15

Recovery point objective (RPO)

Answer 15

The maximum length of time that an organization can tolerate between backups.

Question 16

Recovery time objective (RTO)

Answer 16

The length of time it will take to recover data that has been backed up.

Question 17

Full backup

Answer 17

The starting point for all backups that copies the entire set of data.

Question 18

Differential backup

Answer 18

A backup that copies any data that has changed since last full backup.

Question 19

Incremental backup

Answer 19

A backup that copies any data that has changed since last full backup or last incremental backup.

Question 20

Data sovereignty

Answer 20

The concept that data stored in a digital format is subject to the laws of the country in which the storage facility resides.

Question 21

Electromagnetic interference (EMI)

Answer 21

Electromagnetic fields emitted from technology devices that can result in interference.

Question 22

Electromagnetic pulse (EMP)

Answer 22

A short duration burst of energy by the source.

Question 23

Faraday cage

Answer 23

A metallic enclosure that prevents the entry or escape of an electromagnetic field.

Question 24

Forensics

Answer 24

The application of science to questions that are of interest to the legal profession.

Question 25

Incident response plan (IRP)

Answer 25

A set of written instructions for reacting to a security incident.

Question 26

The 6 action steps to be taken when an incident occurs, called the incident response process, also make up the 6 elements of an IRP

Answer 26

1) preparation
2) identification
3) containment
4) eradication
5) recovery
6) lessons learned

Question 27

Chain of custody

Answer 27

A process of documentation that shows that the evidence was always under strict control and no unauthorized individuals were given the opportunity to corrupt the evidence.