To comply with a certain information security risk management standard, George did an exercise to identify all the risks that his organization faced. He ascertained that his organization was vulnerable to the following risks:
Phishing emails to the employees of his organization
Earthquakes, whichwere common for the city in which his office was located
Destruction of the organization's critical data due to the crashing of the primary server
Electrical surges, which in long-term could cause harm to the primary server
The standard demanded that he prioritize these risks before chalking out a plan to deal with them and identify the risk with the highest priority. According to George, electrical surges were the highest priority risk. Which standard is George trying to comply with?
Answer : A
XYZ Inc. is an esteemed organization that deals with a variety of internet services and solutions. The organization is developing an Internet-based messaging application, which is currently in the analysis phase. According to the analysis conducted, if a disaster destroyed the primary server, the secondary server would only be able to take the traffic load for four hours since it had limited memory and storage capabilities. Hence, the primary server would need to be up and running within four hours. What technical term best defines this time period of four hours?
Answer : B
ABC Investment Bank is implementing a security and disaster recovery plan. As part of the plan, it sets up several remote data centers across the globe. The objective was to not have all the records of any one important client at one location but to distribute chunks of it throughout these centers. This was if any one of the centers is compromised, the attacker will not have only chunks of data and will not be able to use it maliciously against the bank's clients. One other advantage of this is that if a center is struck by a disaster, all the data about a client's portfolio is not lost. For this plan to work, a percentage of deviation should not exist between the actual and targeted business data. Which recovery metric best defines this percentage of deviation?
Answer : D
Which of the following is not an objective of business impact analysis?
Answer : A
Oliver's team had been working hard on a proposal for a new project. After meticulously working out the details for a month, they found out that someone had leaked their proposal to their competitor and they had lost the project. This impacted their morale hugely, and for the next two months, all the other projects progressed extremely slowly resulting in their delay. Which of the following best describes the impact that this data breach had on the organization?
Answer : B
Which of the following is not a component of BIA?
Answer : C
Richard was a cautious person, and he used to back up his organization's data daily at 8:00 pm. One day, due to a fire in his office building at 9:00 am, servers containing critical data were destroyed. It would take about 8 hours for Richard's organization to transfer the backed up data from the alternate site to the primary site. Based on the last data backup, the recovery time in this scenario is 'minus 13 hours'. What technical term best defines this time period of 13 hours?
Answer : A
Which of the following terms refers to a set of tasks that organizations must continue throughout or resume rapidly after a disruptive incident?
Answer : A
An online betting site accepts bets for sporting events held around the world. Due to this, their operations need to be up 24X7. During an internal IT audit, they discovered a vulnerability in their payment gateway system. They assessed that should the payment gateway go down for more an hour, they will lose about $100,000 and about 15% of their customers to their competitor website. Moreover, they might lose 25% of their customer base permanently due to the constant promotions run by their competitor to attract and retain new customers. This was unacceptable for the business under any circumstances, so immediate corrective measures were taken to fix the vulnerability. What technical term best defines this time period of two hours?
Answer : D
While implementing a business continuity plan in her organization, Jane wants to make use of a specific standard. This specific standard would guide her organization in establishing, implementing, and maintaining a formal and documented business impact analysis (BIA) process. Which of the following standards did Jane want to implement in her organization?
Answer : D
Which of the options must be considered by an organization when conducting BIA?
Answer : C
Which of the following term refers to the evaluation of the potential interruptions in the working of a department due to the failure of their internal systems?
Answer : A
Which of the following terms refers to the process of determining the potential impact of disruptive events on an organization's business processes?
Answer : A
Lily works as a disaster recovery professional in an IT company. The archiving method used by the company provides the tools and software required for the archiving of data. The data can be easily accessed and cataloged in this method. However, this method involves recurring costs in its cooling and maintenance. What data archiving method is being used by Lily's company?
Answer : A
Which of the following terms refers to a storage system, which consists of hard disk drives (HDDs) that look and act like a physical tape library?
Answer : A
Have any questions or issues ? Please dont hesitate to contact us