Exam 7: Operations

An organization has identified that the recovery time objective (RTO) criteria as the most critical criteria for its risk management strategy. The company might consider investing in which of the following?

What is a group of servers that are viewed logically as one server to users and can be managed as a single logical system?

Zebra Inc. owns two buildings within a 100 mile radius of each other. They also employ 3,500 of the 10,000 people within that same 100 mile radius. If this company were to decide to create a disaster plan for long-term solutions without long-term downtime, what would be the best option?

Indecisive has been given the task of ensuring that critical papers and records that are required to operate the business are available in the event of a crisis. What advice should you give him to help him determine how to complete this task?

Evidence has its own life cycle and courts and laws find evidence categories to garner different weight and values. What type of evidence involves testifying only on the facts as a witness?

What is a term for programs or devices able to examine traffic on a LAN segment?

Theresa is suspicious of an employee's activity when they are logged-on to their computer. Theresa decides to monitor this employee for fraudulent activity, but plans to review the information later. What type of monitoring is Theresa using?

What is a behavior-based system that learns to build a profile of an environment's "normal" activities?

Damage and Impact Assessment is part of which stage of the Business Continuity Plan?

Becky works at Paul's company, which just got hit by a tornado. The next day Becky went to work a town over and knew the building layout as if she had worked there for years. What type of place is Becky in?

What is the best definition for "alternate worksite"?

When providing bad news during a crisis communication, which tactic should be employed when communicating the news?

A business impact analysis identifies which critical systems are needed by a company and estimates the outage time that can be tolerated for survival. What is this outage time referred to as?

Who should be able to discuss the crisis with the media and other external organizations?

Sara thinks that someone keeps trying to hack into her company's system and wants to know who and why. She decides to use a computer to set up a sacrificial lamb on the network. What is Sara practicing?

Disasters happen every day all over the world. Often, companies fail to develop a disaster plan. When should a disaster recovery plan take place?

Which of these tasks are appropriate tasks for declaring a crisis to be "over"? Select all that apply.

How would you explain the purpose of the Recovery and Resumption phase of the Business Continuity Plan to a new hire in your organization, such as Mr. Newbie?

Once a company has determined its continuity and recovery plans, the plans have to be tested for any problems. What type of testing provides a specific scenario?

If a company fails to have a disaster plan implemented, who could be sued?