Domain 3.2 Flashcards
What type of plan/procedure details how to make a change?
Change Management
true or false: change management is easy to implement
False:
It is easily over looked and is considered very challenging.
Essential to have clear policy surrounding add/change/remove
What is the NIST SP800-61
Provides a handling guide for security incidents
What are the steps included in an incident response lifecycle
-Preparation
-Detection & Analysis
-Containment, Eradication, and recovery
- post incident activity
What are some disasters that could occur
Human created disasters
Natural disasters
technology or system failures
What are some components of a comprehensive recovery plan
- Recovery location
- Data recovery method
- Application restoration
- IT team and employee availability
Describe COOP or BCP
Continuity of operations Planning involves the process of creating alternatives methods of operations that allow the company to continue business in the event of a total system failure.
Give some examples of a COOP
- Manual transactions
- Paper receipts
- phone calls for approval rather than email
what are some concerns when it comes to system lifecycles
Disposal of systems and their information could be unlawful.
You may need to store devices or data for particular amounts of time, or maintain data.
shred sensitive data, never throw it in the trash
What is a SOP
Standard operating procedure
Processes and procedures of a business.
What is an important component to SOPs
They must be documented and written down.
There should be SOPs for the notification of downtime, and facilities issues
Name two common agreements
SLA -
Minimum level of service to be provided
uptime, response time
MOU -
Both sides agree on the contents of the memo.
Usually include statement of confidentiality
What are the two types of NDAs
Unilateral (single parties) or Bilateral (Both parties)
Describe some qualities of a good password policy
High password Entropy ( Very difficult to guess)
- No single words
Mix upper and lower case with special characters
Passwords at least 8 characters
What is an AUP
Acceptable use policy
Detailed document that covers many topics, internet, telephones, PCs
Used by company to limit legal liability
What is a remote access policy
Policy for everyone that specifies technical requirements such as:
-Encrypted connection
-Confidential credentials
-hardware/software requirements
What is the use of a floor plan
Used for network documentation to overlay the wired and wireless network with the existing architectural layout.
-Wires in celling
- AP locations
Where does a floor plan come in handy
Great for matching end-user desks with a patch on the panel in the IDF/MDF
Also great for planning network projects
What is a physical network map
A map that follows physical wire and devices. This can include physical rack locations as well.
What is a distribution frame
Often a room or a laocation which serves a a major part of the network
Typically mounted on wall or flat surface and contains punchdown blocks and patch panels
What is an MDF
Main distribution Frame -
Central point of the network
- usually in a data center
-Termination point for WAN connections which makes it a good spot to test both ends of the WAN
What is an IDF
Intermediate Distribution Frame -
Extension of the MDF and a strategic distro point
uplinks from the MDF and may include workgroup switches, and other local resources
What is a logical network map?
Specialized software that provides a high level view of the WAN layout, and application flows.
Useful for planning and collaboration
What are the standards for the presentation of information that includes cable, pathway, space, and grounding identifiers in a commercial building?
ANSI/TIA/EIA 606
What is the use of a site survey
Identify Access Points
Determine the current wireless landscape
Create heat map of wireless network
Describe internal and external audits
Internal -
Self imposed checks
Validate permissions, check access logs, verify user account status
External - May be required for compliance regulations
What is the point of fault tolerance
To maintain uptime in the case of a system failure
what is a drawback to fault tolerance
It increases cost and complexity to managing systems
What are some single device fault tolerance examples
RAID, Redundant power supplies NIC Teaming
What are some multi-device fault tolerance examples
Serverfarms with load balancing
Multiple network paths
What is clustering
A logical collective of servers
What is load balancing
Shared service load across components
What is implied by HA
High availability -
Always on, always available.
Redundancy does not mean always available
What are the downsides to HA
Higher quality server components, and an ever growing list of contingencies that should be planned for.
