Siedel Chapter 8 Review Questions

Question 1

Which form of BC/DR testing has the most impact on operations?

A. Tabletop
B. Dry run
C. Full test
D. Structured walk through

Answer 1

C. Full test

Explanation:
The full test will involve every asset in the organization including all personnel. The others will have less impact on the organization because they do not involve actually activating the plan

Question 2

Which form of BC/DR testing has the least impact on operations?

A. Tabletop
B. Dry Run
C. Full Test
D. Structured Test

Answer 2

A. Tabletop

Explanation:
The tabletop test involves only essential personnel and none of the production assets.

Question 3

Which characteristic of liquid propane increases its desirability as a fuel for backup generators?

A. Burn rate
B. Price
C. Does not spoil
D. Flavor

Answer 3

C. Does not spoil

Explanation:
Liquid propane does not spoil, which obviates the need to continually refresh and restock it and might make it more cost effective

Question 4

How often should the CMB meet?

A. Whenever regulation dictate
B. Often enough to address organizational needs and reduce frustration with delay
C. Every week
D. Annually

Answer 4

B. Often enough to address organizational needs and reduce frustration with delay

Explanation:
Frustrated employees and managers can increase risk to the organization by implementing their own, unapproved modification to the environment

Question 5

Adhering to ASHRAE standards for humidity can reduce the possibility of _____

A. Breach
B. Static Discharge
C. Theft
D. Inversion

Answer 5

B. Static Discharge

Explanation:
A data center with less than optimum humidity can have a higher static electricity discharge rate. Humidity has no bearing on breaches or theft, and inversion is a nonsense term used as a distractor

Question 6

A UPS should have enough power to last how long?

A. 12 hours
B. 10 minutes
C. One day
D. Long enough for graceful shutdown

Answer 6

D. Long enough for graceful shutdown

Explanation:
The UPS is intended to last only long enough to save production data currently being processed. The exact quantity of time will depend on many variables and will differ from one data center to the next

Question 7

A generator transfer switch should bring backup power online within what time frame?

A. 10 seconds
B. Before the recovery point objective is reached
C. Before the UPS duration is exceeded
D. Three days

Answer 7

C. Before the UPS duration is exceeded

Explanation:
generator power should be online before battery backups fail. The specific amount of time will vary between data centers

Question 8

Which characteristic of automated patching makes it attractive?

A. Cost
B. Speed
C. Noise reduction
D. Capability to recognize problems and quickly

Answer 8

B. Speed

Explanation:
Automated patching is much faster and more efficient than manual patching. it is however not necessarily any less expensive than manual patching. Manual patching is overseen by administrators, who will recognize problems faster than automated tools. Noise reduction is not a factor in patch management at all

Question 9

Which tool can reduce confusion and misunderstanding during a BC/DR response?

A. Flashlight
B. Controls matrix
C. Checklist
D. Call tree

Answer 9

C. Checklist

Explanation:
Checklists server as a reliable

Question 10

When deciding whether to apply specific updates, it is best to follow ______ in order to demonstrate due care

A. Regulations
B. Vendor guidance
C. Internal policy
D. Competitors action

Answer 10

B. Vendor guidance

Explanation:
A data center that doesnt followe vendor guidance might be seen as failing to provide due care. Regulations, internal policy, and the actions of competitors might all inform the decision to perform an update and patch, but these dont necessarily bear directly on due care

Question 11

The CMD should include representations from all of the following offices except ________

A. Regulators
B. IT Department
C. Security office
D. Management

Answer 11

A. Regulators

Explanation:
Regulators are not involved in an organizations CMB. The IT department, security office and management all play a role in the CMB process

Question 12

For performance purposes, OS monitoring should include all of the following except _______

A. Disk space
B. Disk IO usage
C. CPU usage
D. Print spooling

Answer 12

D. Print spooling

Explanation:
Disk space, disk IO usage, and CPU usage are all standard performance monitoring metrics. Print spooling is not normally incorporated into performance monitoring plans

Question 13

Maintenance mode requires all of these actions except ______

A. Remove all active production instances
B. Initiate enhanced security controls
C. Prevent new logins
D. Ensure logging continues

Answer 13

B. Initiate enhanced security controls

Explanation:
During maintenance mode, teams should remove all active production instances, prevent new logons and ensure that logging continues. There is not normally a need to initiate enhanced security controls

Question 14

What is one of the reasons a baseline might be changed?

A. Numerous change requests
B. Power fluctuation
C. To reduce latency
D. Natural disaster

Answer 14

A. Numerous change requests

Explanation:
If the CMb is receving numerous change requests to the point where the number of requests would drop by modifying the baseline, then that is a good reason to change the baseline. The baseline should not be changed due to power fluctuations, to reduce redundancy or due to a natural disaster

Question 15

In addition to battery backup, a UPS can offer which capability?

A. Communication redundancy
B. Line conditioning
C. Breach alert
D. Confidentiality

Answer 15

B. Line conditioning

Explanation:
A UPS can provide line conditioning, adjusting power so that it is optimized for the devices it serves and smoothing any power fluctuations. It does not provide confidetniality, breach alerts or communication redundancy

Question 16

Deviations from security baselines should be investigated and _______

A. Documented
B. Enforced
C. Revealed
D. Encouraged

Answer 16

A. Documented

Explanation:
All deviations from the baseline should be documented, including details of the investigation and outcome. We do not enforce or encourage deviations. Presumably, we would already be aware of the deviation so revealed is not a reasonable answer

Question 17

The baseline should cover which of the following?

A. As many systems throughout the organization as possible
B. Data breach alerting and reporting
C. A process for version control
D. All regulatory compliance requirements

Answer 17

A. As many systems throughout the organization as possible

Explanation:
The more systems that are included in the baseline, the most cost effective and scalable the baseline is. The baseline does not deal with breaches or version control; those are the provinces of the security office and CMB

Question 18

A localized incident or disaster can be addressed in a cost effective manner by using which of the following?

A. UPS
B. Generators
C. Joint operating agreements
D. Strict adherence to applicable regulations

Answer 18

C. Joint operating agreements

Explanation:
Joint operating agreements can provide nearby relocation sites so that a disruption limited to the organizations own facil;ity and campus can be addressed at a different facility and campus

Question 19

Generator fuel storage for a cloud data center should last for how long, at a minimum?

A. 10 minutes
B. Three days
C. Indefinitely
D. 12 hours

Answer 19

D. 12 hours

Explanation:
The Uptime Institute is dictates 12 hours of generator fuel for all cloud data center tiers

Question 20

The BCDR kit should include all of the following except ______

A. Flashlight
B. Documentation equipment
C. Fuel for backup generators
D. Annotated asset inventory

Answer 20

C. Fuel for backup generators

Explanation:
THe BCDR kit is inteded to be compact, and generator fuel is too cumbersome to include with the kit. All the other items should be included