Chapter 16 (Lesson 11) Flashcards
- What are some of the main concerns businesses have when considering adopting a mutual assistance agreement?
- Businesses have three main concerns when considering adopting a mutual assistance agreement.
- First, the nature of an MAA often necessitates that the businesses be located in close geographical proximity. However, this requirement also increases the risk that the two businesses will fall victim to the same threat.
- Second, MAAs are difficult to enforce in the middle of a crisis. If one of the organizations is affected by a disaster and the other isn’t, the organization not affected could back out at the last minute, leaving the other organization out of luck.
- Finally, confidentiality concerns (both legal and business related) often prevent businesses from trusting others with their sensitive operational data.
- List and explain the five types of disaster recovery tests.
- There are five main types of disaster recovery tests:
- Checklist tests involve the distribution of recovery checklists to disaster recovery personnel for review.
- Structured walk-throughs are “table-top” exercises that involve assembling the disaster recovery team to discuss a disaster scenario.
- Simulation tests are more comprehensive and may impact one or more noncritical business units of the organization.
- Parallel tests involve relocating personnel to the alternate site and commencing operations there.
- Full-interruption tests involve relocating personnel to the alternate site and shutting down operations at the primary site.
- Explain the differences between the three types of backup strategies discussed in this chapter.
- Full backups create a copy of all data stored on a server.
Incremental backups create copies of all files modified since the last full or incremental backup.
Differential backups create copies of all files modified since the last full backup without regard to any previous differential or incremental backups that may have taken place.
What is the end goal of disaster recovery planning?
A. Preventing business interruption
B. Setting up temporary business operations
C. Restoring normal business activity
D. Minimizing the impact of a disaster
C. Once a disaster interrupts the business operations, the goal of DRP is to restore regular business activity as quickly as possible. Thus, disaster recovery planning picks up where business continuity planning leaves off.
Which one of the following is an example of a man-made disaster?
A. Tsunami
B. Earthquake
C. Power outage
D. Lightning strike
C. A power outage is an example of a man-made disaster. The other events listed—tsunamis, earthquakes, and lightning strikes—are all naturally occurring events.
According to the Federal Emergency Management Agency, approximately what percentage of U.S. states is rated with at least a moderate risk of seismic activity?
A. 20 percent
B. 40 percent
C. 60 percent
D. 80 percent
D. As shown in Table 16.1, 41 of the 50 U.S. states are considered to have a moderate, high, or very high risk of seismic activity. This rounds to 80 percent to provide the value given in answer D.
Which one of the following disaster types is not usually covered by standard business or homeowner’s insurance?
A. Earthquake
B. Flood
C. Fire
D. Theft
B. Most general business insurance and homeowner’s insurance policies do not provide any protection against the risk of flooding or flash floods. If floods pose a risk to your organization, you should consider purchasing supplemental flood insurance under FEMA’s National Flood Insurance Program.
In the wake of the September 11, 2001, terrorist attacks, what industry made drastic changes that directly impact DRP/BCP activities?
A. Tourism
B. Banking
C. Insurance
D. Airline
C. All the industries listed in the options made changes to their practices after September 11, 2001, but the insurance industry’s change toward noncoverage of acts of terrorism most directly impacts the BCP/DRP process.
Which of the following statements about business continuity planning and disaster recovery planning is incorrect?
A. Business continuity planning is focused on keeping business functions uninterrupted when a disaster strikes.
B. Organizations can choose whether to develop business continuity planning or disaster recovery planning plans.
C. Business continuity planning picks up where disaster recovery planning leaves off.
D. Disaster recovery planning guides an organization through recovery of normal operations at the primary facility.
C. The opposite of this statement is true—disaster recovery planning picks up where business continuity planning leaves off. The other three statements are all accurate reflections of the role of business continuity planning and disaster recovery planning.
What does the term “100-year flood plain” mean to emergency preparedness officials?
A. The last flood of any kind to hit the area was more than 100 years ago.
B. The odds of a flood at this level are 1 in 100 in any given year.
C. The area is expected to be safe from flooding for at least 100 years.
D. The last significant flood to hit the area was more than 100 years ago.
B. The term 100-year flood plain is used to describe an area where flooding is expected once every 100 years. It is, however, more mathematically correct to say that this label indicates a 1 percent probability of flooding in any given year.
In which one of the following database recovery techniques is an exact, up-to-date copy of the database maintained at an alternative location?
A. Transaction logging
B. Remote journaling
C. Electronic vaulting
D. Remote mirroring
D. When you use remote mirroring, an exact copy of the database is maintained at an alternative location. You keep the remote copy up-to-date by executing all transactions on both the primary and remote site at the same time.
What disaster recovery principle best protects your organization against hardware failure?
A. Consistency
B. Efficiency
C. Redundancy
D. Primacy
C. Redundant systems/components provide protection against the failure of one particular piece of hardware.
What business continuity planning technique can help you prepare the business unit prioritization task of disaster recovery planning?
A. Vulnerability analysis
B. Business impact assessment
C. Risk management
D. Continuity planning
B. During the business impact assessment phase, you must identify the business priorities of your organization to assist with the allocation of BCP resources. You can use this same information to drive the DRP business unit prioritization.
Which one of the following alternative processing sites takes the longest time to activate?
A. Hot site
B. Mobile site
C. Cold site
D. Warm site
C. The cold site contains none of the equipment necessary to restore operations. All of the equipment must be brought in and configured and data must be restored to it before operations can commence. This often takes weeks.
What is the typical time estimate to activate a warm site from the time a disaster is declared?
A. 1 hour
B. 6 hours
C. 12 hours
D. 24 hours
C. Warm sites typically take about 12 hours to activate from the time a disaster is declared. This is compared to the relatively instantaneous activation of a hot site and the lengthy time (at least a week) required to bring a cold site to operational status.
