Objects, persons, or other entities that pose a potential risk of loss to an asset are called:

vulnerabilities.

threats.

attacks.

exploits.

Which plan details the steps to be taken when an attack or incident is in process?

Contingency plan

Business continuity plan

Business recovery plan

Incident response plan

The first step in the business impact analysis is to identify and prioritize ______.

business unit analysis

threat attacks

attack success scenario development

damage assessment

What should be the first deliverable item created by the IR planning team?

Establish policies and procedures for information sharing

Select an IR team model

Develop an IR policy

Select the IR

Which type of plan testing involves individuals who act as if an incident has occurred, but do so without interfering with normal operations?

Simulation

Full interruption

War gaming

Parallel testing

An IDS that collects statistical summaries and comparisons to normal traffic is known as a ______.

signature-based IDS

knowledge-based IDS

statistical anomaly-based IDS

None of the above

Determination of the initial flaw or vulnerability that allowed the incident to occur is called ______.

forensics

root cause analysis

fact-finding

None of the above

Which backup method offers the fastest recovery time?

Partial

Full

Incremental

Differential

Which of the following job classifications should be represented on the DR team?

Senior management

Fire and safety

IT managers

All of the above

In the BC sub-team organization, which team handles setting up user accounts and remote connectivity?

Management team

Operations team

Systems recovery team

Network recovery team

Which of the following constitutes the final action of the BC team after return to the primary site?

After-action review (AAR)

Conduct plan maintenance

Test the plan

Conduct exercises

Which DR team is responsible for reestablishing connectivity between systems and to the Internet (if applicable)?

Disaster management team

Communications team

Computer recovery team

Network recovery team

What term is used to describe those critical organizational functions that are prepared for alternative deployment?

Network support

Computer recovery

Operational support

Command and control

Which of the following is not a purpose of the BC review?

Provide for a refresher on the content of the plan

Assess the suitability of the plan

Provide an opportunity to reconcile BC activities with other regulatory activities

All of the above are purposes of the BC review.

What is the term for all activities related to safely managing the immediate physical, health, and environmental impacts of an incident?

Emergency response

Crisis communications

Humanitarian assistance

Disaster relief

Short Answers

Define risk management.

What are the three things that make shaping policy difficult?

Explain what is meant by a cold site.

Explain why it is important that organizations engage in disaster recovery planning.

What is the primary objective of the crisis management team?

Argue whether or not you believe that organizations should prepare for all possible contingencies.

Design a succession plan for an organization. What steps would you include in the plan?

Outline and assess the most important elements of a comprehensive business continuity plan.

Question 4. 4. (TCO 7) Given that an organizations resumption strategy for an exclusive-use site criteria includes the requirement for fully installed hardware and full telecommunications ability with no setup time, summarize the type of site best suited for it and what it may cost.

Summarize what is typically involved in crisis communications.

Summarize the role of the crisis management team, and list some of the general duties of the CMT.