Cyber Resilience and Redundancy Flashcards

1
Q

High Availability

A

● Aims to keep services continuously available by minimizing downtime
● Achieved through load balancing, clustering, redundancy, and multi-cloud
strategies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Uptime

A

The time a system remains online, typically expressed as a percentage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Five nines

A

Refers to 99.999% uptime, allowing only about 5 minutes of downtime
per year

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Six nines

A

Refers to 99.9999% uptime, allows just 31 seconds of downtime per year

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Load Balancing

A

Distributes workloads across multiple resources. Incoming requests are directed to capable servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Clustering

A

Uses multiple computers, storage devices, and network connections as a single system. Can be combined with load balancing for robust solutions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Redundancy

A

Involves duplicating critical components to increase system reliability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Multi-Cloud Approach

A

■ Distributes data, applications, and services across multiple cloud providers
■ Mitigates the risk of a single point of failure
■ Offers flexibility for cost optimization
■ Aids in avoiding vendor lock-in
■ Requires proper data management, unified threat management, and consistent
policy enforcement for security and compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Strategic Planning

A

■ Proactive measures reduce the risk of service disruptions and downtime costs
■ Safeguard organizational continuity and reliability in a competitive environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

RAID

A

Redundant Array of Independent Disks

Combines multiple physical storage devices into a single logical storage
device recognized by the operating system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

RAID 0

A

■ Provides data striping across multiple disks
■ Used for improved performance but offers no data redundancy
■ Multiple drives increase read and write speeds
■ Suitable for scenarios where performance is essential, and data redundancy is
not a concern

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

RAID 1

A

■ Provides redundancy by mirroring data identically on two storage devices
■ Ensures data integrity and availability
■ Suitable for critical applications and maintains a complete copy of data on both
devices
■ Only one storage device can fail without data loss or downtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

RAID 5

A

■ Utilizes striping with parity across at least three storage devices
■ Offers fault tolerance by distributing data and parity
■ Can continue operations if one storage device fails
■ Data reconstruction is possible but results in slower access speeds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

RAID 6

A

■ Similar to RAID 5 but includes double parity data
■ Requires at least four storage devices
■ Can withstand the failure of two storage devices without data loss

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

RAID 10

A

■ Combines RAID 1 (mirroring) and RAID 0 (striping)
■ Offers high performance, fault tolerance, and data redundancy
■ Requires an even number of storage devices, with a minimum of four

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

RAID Resilience Categories

A

■ Failure-resistant
● Resists hardware malfunctions through redundancy (e.g., RAID 1)

■ Fault-tolerant
● Allows continued operation and quick data rebuild in case of failure (e.g.,
RAID 1, RAID 5, RAID 6, RAID 10)

■ Disaster-tolerant
● Safeguards against catastrophic events by maintaining data in
independent zones (e.g., RAID 1, RAID 10)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Capacity Planning

A

Ensures an organization is prepared to meet future demands in a cost-effective
manner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Main aspects of Capacity Planning

A
  1. People
  2. Technology
  3. Infrastructure
  4. Processes
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Surges

A

Sudden, small increases in voltage beyond the standard level (e.g., 120V
in the US)

20
Q

Spikes

A

Short-lived voltage increases, often caused by short circuits, tripped
breakers, or lightning

21
Q

Sags

A

Brief decreases in voltage, usually not severe enough to cause system
shutdown

22
Q

Undervoltage Events (Brownouts)

A

Prolonged reduction in voltage, leading to system shutdown

23
Q

Power Loss Events (Blackouts)

A

Complete loss of power for a period, potentially causing data loss and
damage

24
Q

Line Conditioners

A

● Stabilize voltage supply and filter out fluctuations
● Mitigate surges, sags, and undervoltage events
● Unsuitable for significant undervoltage events or complete power failures

25
UPS
Uninterruptible Power Supply ● Provide emergency power during power source failures ● Offer line conditioning functions ● Include battery backup to maintain power during short-duration failures ● Typically supply 15 to 60 minutes of power during a complete power failure
26
PDC
Power Distribution Centers ● Central hub for power reception and distribution ● Includes circuit protection, monitoring, and load balancing ● Integrates with UPS and backup generators for seamless transitions during power events
27
Onsite Backup
Storing data copies in the same location as the original data
28
Offsite Backup
Storing data copies in a geographically separate location
29
RPO
Recovery Point Objective Ensures that the backup plan will maintain the amount of data required to keep any data loss under the organization’s RPO threshold
30
Snapshots
■ Point-in-time copies capturing a consistent state ■ Records only changes since the previous snapshot, reducing storage requirements ■ Use cases ● Valuable for systems where data consistency is critical, like databases and file servers
31
Replication
Real-time or near-real-time data copying to maintain data continuity
32
Journaling
Maintaining a detailed record of data changes over time
33
COOP
Continuity of Operations Plan Ensures an organization's ability to recover from disruptive events or disasters
34
BC Plan
Business Continuity Planning ● Plans and processes for responding to disruptive events ● Addresses a wide range of threats and disruptive incidents ● Involves preventative actions and recovery steps
35
DRP
Disaster Recovery Plan ● Focuses on plans and processes for disaster response ● Subset of the BC Plan ● Focuses on faster recovery after disasters
36
Business Continuity Committee
Comprises representatives from various departments (IT, Legal, Security, Communications, etc.) Determines recovery priorities for different events Identifies and prioritizes systems critical for business continuity
37
Redundant Site
Backup location or facility that can take over essential functions and operations in case the primary site experiences a failure or disruption
38
Hot Sites
● Up and running continuously, enabling a quick switchover ● Requires duplicating all infrastructure and data ● Expensive, but provides instant availability
39
Warm Sites
● Not fully equipped, but fundamentals in place ● Can be up and running within a few days ● Cheaper than hot sites but with a slight delay
40
Cold Sites
● Fewer facilities than warm sites ● May be just an empty building, ready in 1-2 months ● Cost-effective but adds more recovery time
41
Mobile Sites
● Can be hot, warm, or cold ● Utilizes portable units like trailers or tents ● Offers flexibility and quick deployment (e.g., military DJC2)
42
Platform Diversity
■ Critical for effective virtual redundant sites ■ Diversify operating systems, network equipment, and cloud platforms ■ Reduces the risk of a single point of failure ■ Ensures resilience and adaptability in case of disruptions
43
Virtual Sites
Leveraging cloud-based environments for redundancy
44
Tabletop Exercises
■ Scenario-based discussion among key stakeholders ■ Assess and improve an organization's preparedness and response ■ No deployment of actual resources
45
Failover Tests
■ Controlled experiment for transitioning from primary to backup components ■ Ensures uninterrupted functionality during disasters
46
Simulations
■ Computer-generated representation of a real-world scenario ■ Allows for hands-on response actions in a virtual environment
47
Parallel Processing
Replicates data and system processes onto a secondary system