Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CyberSecurity > Lecture 9 > Flashcards

Lecture 9 Flashcards

(73 cards)

Start Studying
1
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is business continuity?

A

An organization’s ability to maintain operations after a disruptive event

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a business continuity plan BCP?

A

A strategic document that provides alternative modes of operation for business activities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the three steps in creating a BCP?

A

Identifying exposure to threats Creating preventative and recovery procedures Testing them to determine if they are sufficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the three main goals of a BCP?

A

Business recovery planning Crisis management and communications Disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What elements should a BCP have?

A

High availability Scalability Diversity On-prem and cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Continuity of Operation Planning COOP?

A

A federal initiative encouraging organisations to address how critical operations continue under negative circumstances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does Business Impact Analysis BIA do?

A

Identifies business functions and quantifies the impact loss may have on operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What types of impacts does a BIA consider?

A

Impact on property Impact on finance Impact on safety Impact on reputation Impact on life

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the mission-essential function?

A

The activity that serves the enterprise’s core purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a single point of failure?

A

A component or entity in a system that will disable the entire system if it fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does minimizing single failure points result in?

A

High availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does a Disaster Recovery Plan DRP focus on?

A

Protecting and restoring information technology functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is included in a DRP?

A

A written document detailing processes for restoring IT resources after disruption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a common topic covered by DRPs?

A

The sequence in restoring systems or restoration order

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is fault tolerance?

A

A system’s ability to deal with malfunctions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the solution to fault tolerance?

A

Building in redundancy by duplicating equipment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is mean time to recovery MTTR?

A

Average time for a device to recover from a non-terminal failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What types of equipment can redundancy involve?

A

Endpoints Servers Disks Networks Power Sites Data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Why is endpoint downtime less critical?

A

Because user endpoints affect fewer critical functions than servers or networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a feature that allows OS rollback?

A

Revert to a known state

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does freezing a computer do?

A

Prevents changes from malware making the system nonpersistent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What role do servers play in network infrastructure?

A

They are key and their loss can have significant business impact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is server clustering?

A

Combining two or more servers to appear as a single unit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is an asymmetric server cluster?
A cluster where a standby server is ready but performs no work until needed
26
What is a symmetric server cluster?
All servers do useful work and share the load; if one fails others take over
27
How has virtualization impacted server redundancy?
Replication tools automatically launch copies of virtual machines if one shuts down
28
What are two hardware redundancies for disks?
RAID and SAN multipath
29
What are SSDs and why are they preferred?
Solid-state drives more resistant to failure and more reliable than HDDs
30
What does MTBF mean?
Mean time between failures measures average time until component failure
31
What is RAID?
Redundant Array of Independent Disks using multiple drives to increase reliability and performance
32
What is RAID Level 0?
Striped disk array without fault tolerance; data alternates across drives; failure causes data loss
33
What is RAID Level 1?
Mirroring where data on primary drive is duplicated on others to prevent data loss
34
What is disk duplexing?
Variation of RAID 1 using separate controller cards to protect against controller failure
35
What is RAID Level 5?
Distributes parity across drives for error checking allowing recovery if one drive fails
36
What is a storage area network SAN?
A dedicated network storage facility providing high-speed access to pooled storage devices
37
What is multipath in SANs?
Technique creating multiple physical paths between devices and storage to increase speed and reliability
38
Why are redundant networks important?
Because connectivity is critical and redundant networks provide backup in case of failure
39
What is NIC teaming?
Combining network interface cards for redundancy and faster performance
40
What is a UPS?
Uninterruptible power supply maintaining power during primary source interruption
41
What is an off-line UPS?
Simple least expensive UPS charged by main power that switches on when primary power fails
42
What is an on-line UPS?
UPS running always off battery and unaffected by voltage dips serving also as surge protector
43
What is a backup generator?
Power source that automatically starts when main power is lost using diesel natural gas or propane
44
What are recovery sites?
Backup locations used if main site is damaged by disaster like flood or hurricane
45
What are the three types of recovery sites?
Hot site Cold site Warm site
46
What characterizes a hot site?
Duplicate production site with all equipment and quick data backup availability
47
What characterizes a cold site?
Office space only no equipment or backups less expensive longer to resume operations
48
What characterizes a warm site?
Equipment installed no active connections or data backups less expensive than hot site
49
What is data backup?
Copying information to different medium for use in case of disaster
50
What two metrics help decide backup timing?
Recovery point objective RPO and Recovery time objective RTO
51
What is continuous data protection CDP?
Backup technology performing continuous backups with immediate restore and historical record
52
Where do most organisations store off-site backups?
Online cloud repositories using CDP technology
53
What is the 3-2-1 backup plan?
Three copies of backups on at least two different media with one copy off-site
54
What is a policy?
Document outlining specific requirements or rules to be met
55
What are characteristics of a policy?
Communicates consensus Defines appropriate user behavior Identifies needed tools and procedures Guides HR actions May help prosecute violators
56
What do account management policies control?
Restrictions regarding user accounts including password creation and use
57
What tool can manage accounts in Windows?
Group Policy and Active Directory
58
What is an access policy?
Permissions and restrictions based on role-based access control
59
What are mobile device location-based policies?
Policies enforcing device access or actions based on geolocation geotagging or geofencing
60
What is separation of duties?
Dividing process between individuals to prevent security breaches
61
What is job rotation?
Moving employees between roles to limit control and expose fraud avenues
62
What is mandatory vacation?
Scheduling audits while employees are away to detect issues
63
What is a clean desk policy?
Ensuring confidential materials are secured when not in use
64
What does least privilege mean?
Allocating only minimum privileges needed to perform job or function
65
What are onboarding and offboarding?
Processes for hiring new employees and steps taken when they leave including access removal
66
What is an acceptable use policy AUP?
Policy defining permitted user actions on systems and networks covering employees vendors and visitors
67
What organizational policies are common?
Change management Change control Asset management
68
What is a data classification policy?
Assigning labels to data based on importance
69
What is a data governance policy?
Formal guidelines regarding handling of data
70
What is a data retention policy?
Specifies how long data is retained after its initial purpose
71
What is IT contingency planning?
Developing procedures to follow after major IT incidents
72
What is fault tolerance?
Resilience to prevent issues from crippling systems
73
What is the most important redundancy?
Data redundancy through backups

CyberSecurity (16 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions