CISA Refresher 3 Flashcards Preview

CISA Stuff > CISA Refresher 3 > Flashcards

Flashcards in CISA Refresher 3 Deck (27):
1

A clustering is

a type of software that is installed on every server in which the application runs and includes management software that permits control of and tuning the cluster behaviour

2

RAID provides

performance improvements and fault tolerent capabilities via hardware and software solutions, breaking up data and writing data to a series of multiple disks to simultaneously improve performanance and save large files

3

diverse routing

the method of routing traffic through split cable facilities or duplicate cable facilities

4

diverse routing, disadvantages

It is time consuming and costly. These cable facilities are usually located in the ground or basement. Ground based facilities are at great risk due to aging infrastructures of cities. And usually it share rooms with mechanical and electrical systems that can impse great risk due to human error and disastrous events.

5

Emergency action team

One of their primary functions is the orderly evacuation of personnel and securing human life

6

Emergency management team

Their function entails arranging finances of recovery, handling legal matters evolving from the disaster, and handling public relation and media inquires

7

Offsite storage team

Resoponsible for obtaining, packaging and shipping media and record to the recovery facilities, as well as establishing and overseeing an offsite storage schedule for information created during operations at the recovery site

8

Transportation team

serves as facilities team to locate recovery site, if one has not been predetermined and is resposible for coordinating the raansport of company employees to a distant recovery site.

9

Supplies team

Supports the efforts of the user hardware team by contacting vendors and coordinating logistics for an ongoing supplyes of necessary offices and computer supplies

10

Salvage team

Manages the relocation project. This team also makes a more detailed assessment of the damage to the facilities and equipment than was preformed initially, provides information necessary for filing insurance claims.

11

Relocation team

Coordinates the process of moving from the hot site to a new location or to the restored original location

12

Coordination team

Resoponsible for coordinating the recovery efforts across various ofices located at different geographical locations

13

A Crucial element of DRP

is the availability of adequate data

14

The most important features of the tape drives is its data interface

TRUE

15

Disk based backup system

VTL, Host based replication, Disk array based replication, snapshots

16

VTL ( virtual tape libraries

The systems consist of dis storage and software that control backup and recovery data sets.

17

Host based replications

This replication is done at the host (server) level by a special software running on this server and on the target server. Could be done in real time.

18

Disk array based replication

Same as host based rplications, however the rplication is performed at the disk array level, completely hidden from servers and applications.

19

Snapshots

This technology is very flexinble, allowing making different type of momentary copies of volumes or file systems. Thid technology is especially efficient and effective while used in combination with backup and recovery software

20

Differential backup

It requires less time to restore than incremental baackups, but it is slower and require more media capacity than incremental backups because data that are backed up are cumulative.

21

Reconnaissance

should be performed first to establish the footperint of the target organization and search for any information leakage that would inadvertently disclose technical details about the organizations network.

22

Enumeration

involves mapping the networok services, protocols and devices and would normaly occur after the initial reconnaissance

23

Vulnerability scanning

would occur in the later stage of the assessment

24

Disadvantage of IDS

is its inherent inability to scan for vulnerabilities atthe application level. It cannotg break encrypted date packtes to identify the source of the incoming traffic.

25

In order to provide the greatest security and efficiency and IDS should be placed behind the firewall so that it will detect only those attacks / intruders that enter the firewall

TRUE

26

System administrator account

It is not possible to lock out the system administrator account after several failed logon attempts, because it would be impossible to unlock it. Therefore it is subject to online brute force attacks.

27

A Digital signature includes an encrypted has total of the size of the message as it was transmitted by its originator. This has would no longer be accurate if the messagewas altered subsequently, indicating that the alteration has occured

TRUE