Exam 3: Planning for Contingencies

An attack ____________________ adds more details to the attack profile,including the alternative outcomes.

A ____ is a fully configured computer facility that needs only the latest data backups and the personnel to function.

A ____ activation requires that the first person call designated people on the roster,who in turn call other designated people,and so on.

In ____________________ testing of contingency plans,the individuals follow each and every procedure,including the interruption of service,restoration of data from backups,and notification of appropriate individuals.

Notification from IDS is a probable indicator of an actual incident.

____________________ planning ensures that critical business functions can continue if a disaster occurs.

A ____ is simply an empty room with standard heating,air conditioning,and electrical service.

The DRP is usually managed by the ____.

The presence of hacker tools in a system definitely signals that an incident is in progress or has occurred.

$\text {\underline{Parallel } }$ testing is the most rigorous strategy for testing contingency plans._________________________

When a disaster threatens the viability of an organization at the primary site,the ____ is started.

A(n)____________________ is an agency that provides,in the case of DR/BC planning,physical facilities for a fee.

$\text {\underline{Rapid-onset } }$ disasters occur suddenly,and may take the lives of people and destroy the means of production._________________________

The ____________________ team is charged with setting up and starting off-site operations in the event of an incident or disaster.

A(n)attack $\text {\underline{scenario } }$ consists of a detailed description of the activities that usually occur during an attack._________________________

A contract between two organizations in which each party agrees to assist the other in the event of a disaster is called a ____.

No computer hardware or peripherals are provided in a ____.

When dealing with an incident,the incident response team must conduct a(n)____________________,which entails a detailed examination of the events that occurred from first detection to final recovery.

A warm site offers many of the advantages of a(n)____________________ site,but at a lower cost.

____ is the process of examining a possible incident and determining whether it constitutes an actual incident.