Exam 7: Operations

Which term is used to describe the process of returning an organization to its normal state after a crisis?

Once a company has determined its continuity and recovery plans, the plans have to be tested for any problems. What would be the most thorough approach to this undertaking?

When planning and implementing recovery/resumption procedures, what is the most important aspect?

If a fatality or injury occurs during a crisis, what should the Business Continuity Plan recommend?

There is a main difference between preventative mechanisms and recovery strategies. What would be true of recovery strategies?

What should companies be concerned with when determining the best products to purchase while determining what would be the most cost effective with concerns to hardware failures?

Kim wants to know of any differences in the baseline environment of her system by learning of any changes in the amount of activity in the system. What would be her best option?

Evidence has its own life cycle and courts and laws find evidence categories to garner different weight and values. What type of evidence can prove a fact all by itself?

I am an evil hacker. I wish to infect your system with malicious code. What item below would I not do?

Business continuity planning should only be done for medium or large sized companies. Smaller companies cannot use the principles of BCP.

There is no specific business continuity steps rulebook. However, the National Institute of Standards and Technology is responsible for developing best practices and they have developed seven best practices. What item below is not one of the best practices?

What is the proper term for a process to have no more privileges than necessary to be able to fulfill its functions?

Backing up software and having backup hardware devices are two large parts of network availability. What provides continuous online backup functionality?

Security guards can fail at checking every individual entering a building. One way to avoid possible intruders is for a company to use user-activated readers. Which item(s) is/are not a user-activated reader?

Carrie's friend was just in an earthquake while at work. This got Carrie thinking that her company needed a business continuity plan. She decided to put someone in charge of developing, implementing, and testing the new plan. What is the proper name for the person put in charge?

My computer has gotten sick, but there is no virus. Each time I think the illness is gone, it seems to reproduce itself. What has gotten into my computer?

It is very important for businesses to back up their data if they want some level of business functionality after a disaster. What two backup methods backup files from the time of the last full backup?

Which of these should be included in the Damage and Impact Assessment immediately after a crisis? Select all that apply.

Newbie has recently joined the Crisis Management team as part of his work on the Business Continuity Plan. When should he schedule his training on the current version of the Business Continuity Plan?

Evidence has its own life cycle and courts and laws find evidence categories to garner different weight and values. What type of evidence can prove an intermediate effect that can then be used to deduce another fact?