InfoSec Chapt 10 Planning for Contingencies

Which of the following contains the contact information of individuals that need to be notified in the event of an actual incident?

• incident response policy

• business process

• alert roster

• after-action review

Detecting a modification of system logs is an indicator that an actual incident has taken place.

• True

• False

Which term below describes the point in time, prior to a disruption or outage, to which mission / business process data can be recovered?

• Maximum Tolerable Downtime (MTD)

• Recovery Time Objective (RTO)

• Recovery Point Objective (RPO)

• Work Recovery Time (WRT)

What is the first phase of the CP process?

• Business impact analysis

• Incident response planning

• Disaster recovery planning

• Business continuity planning

Which of the following is NOT a major component of contingency planning?

• Incident response plan

• Disaster relief plan

• Disaster recovery plan

• Business continuity plan

Slow-onset disasters occur over time and gradually degrade an organization’s ability to withstand their effects.

• True

• False

Which of the following terms best describe a site with a fully configured computer facility, including all services, communications links, and physical plant operations?

• hot site

• warm site

• mobile site

• cold site

Which type of offsite backup service provides backups for transactional data only, typically in real time?

• Electronic vaulting

• Traditional data backups

• Database shadowing

• Remote journaling

Which of the following is NOT considered a responsibility of the CMPT?

• verifying personnel status

• activating the alert roster

• plan maintenance schedule

• coordinating with emergency services

There are several strategies that can be used to test contingency plans. Which of the following is the simplest kind of validation and involves distributing copies of the appropriate plans to all individuals who will be assigned roles during an actual incident?

• full-interruption testing

• simulation

• structured walk-through

• desk check