CISA Refresher 3

Question 1

A clustering is

Answer 1

a type of software that is installed on every server in which the application runs and includes management software that permits control of and tuning the cluster behaviour

Question 2

RAID provides

Answer 2

performance improvements and fault tolerent capabilities via hardware and software solutions, breaking up data and writing data to a series of multiple disks to simultaneously improve performanance and save large files

Question 3

diverse routing

Answer 3

the method of routing traffic through split cable facilities or duplicate cable facilities

Question 4

diverse routing, disadvantages

Answer 4

It is time consuming and costly. These cable facilities are usually located in the ground or basement. Ground based facilities are at great risk due to aging infrastructures of cities. And usually it share rooms with mechanical and electrical systems that can impse great risk due to human error and disastrous events.

Question 5

Emergency action team

Answer 5

One of their primary functions is the orderly evacuation of personnel and securing human life

Question 6

Emergency management team

Answer 6

Their function entails arranging finances of recovery, handling legal matters evolving from the disaster, and handling public relation and media inquires

Question 7

Offsite storage team

Answer 7

Resoponsible for obtaining, packaging and shipping media and record to the recovery facilities, as well as establishing and overseeing an offsite storage schedule for information created during operations at the recovery site

Question 8

Transportation team

Answer 8

serves as facilities team to locate recovery site, if one has not been predetermined and is resposible for coordinating the raansport of company employees to a distant recovery site.

Question 9

Supplies team

Answer 9

Supports the efforts of the user hardware team by contacting vendors and coordinating logistics for an ongoing supplyes of necessary offices and computer supplies

Question 10

Salvage team

Answer 10

Manages the relocation project. This team also makes a more detailed assessment of the damage to the facilities and equipment than was preformed initially, provides information necessary for filing insurance claims.

Question 11

Relocation team

Answer 11

Coordinates the process of moving from the hot site to a new location or to the restored original location

Question 12

Coordination team

Answer 12

Resoponsible for coordinating the recovery efforts across various ofices located at different geographical locations

Question 13

A Crucial element of DRP

Answer 13

is the availability of adequate data

Question 14

The most important features of the tape drives is its data interface

Answer 14

TRUE

Question 15

Disk based backup system

Answer 15

VTL, Host based replication, Disk array based replication, snapshots

Question 16

VTL ( virtual tape libraries

Answer 16

The systems consist of dis storage and software that control backup and recovery data sets.

Question 17

Host based replications

Answer 17

This replication is done at the host (server) level by a special software running on this server and on the target server. Could be done in real time.

Question 18

Disk array based replication

Answer 18

Same as host based rplications, however the rplication is performed at the disk array level, completely hidden from servers and applications.

Question 19

Snapshots

Answer 19

This technology is very flexinble, allowing making different type of momentary copies of volumes or file systems. Thid technology is especially efficient and effective while used in combination with backup and recovery software

Question 20

Differential backup

Answer 20

It requires less time to restore than incremental baackups, but it is slower and require more media capacity than incremental backups because data that are backed up are cumulative.

Question 21

Reconnaissance

Answer 21

should be performed first to establish the footperint of the target organization and search for any information leakage that would inadvertently disclose technical details about the organizations network.

Question 22

Enumeration

Answer 22

involves mapping the networok services, protocols and devices and would normaly occur after the initial reconnaissance

Question 23

Vulnerability scanning

Answer 23

would occur in the later stage of the assessment

Question 24

Disadvantage of IDS

Answer 24

is its inherent inability to scan for vulnerabilities atthe application level. It cannotg break encrypted date packtes to identify the source of the incoming traffic.

Question 25

In order to provide the greatest security and efficiency and IDS should be placed behind the firewall so that it will detect only those attacks / intruders that enter the firewall

Answer 25

TRUE

Question 26

System administrator account

Answer 26

It is not possible to lock out the system administrator account after several failed logon attempts, because it would be impossible to unlock it. Therefore it is subject to online brute force attacks.

Question 27

A Digital signature includes an encrypted has total of the size of the message as it was transmitted by its originator. This has would no longer be accurate if the messagewas altered subsequently, indicating that the alteration has occured

Answer 27

TRUE