Business Continuity and Disaster Recovery Study Guide Questions

Course Introduction

This course explores the principles and practices of business continuity and disaster recovery, emphasizing strategies to ensure organizational resilience in the face of disruptions. Students will learn how to identify risks, develop comprehensive continuity plans, and implement disaster recovery frameworks to minimize operational downtime and data loss. The course covers essential topics such as risk assessment, incident response, data backup solutions, crisis communication, and regulatory compliance. Through case studies and practical exercises, students will gain the skills needed to design and maintain plans that protect business operations and critical assets during unexpected events.

Recommended Textbook

Management of Information Security 3rd Edition by Michael

E. Whitman

Flashcards

Source URL: https://quizplus.com/study-set/2354

Page 2

Chapter 1: Introduction to the Management of Information Security

Available Study Resources on Quizplus for this Chatper

139 Verified Questions

139 Flashcards

Source URL: https://quizplus.com/quiz/46799

Sample Questions

Q1) It is possible to take a very complex operation and diagram it in PERT if you can answer three key questions about each activity.Which of the following is NOT one of them?

A) How long will it take?

B) What activity occurs immediately before this activity?

C) What activity occurs immediate activity after this activity?

D) What other activities require the same resources as this activity?

Answer: D

Q2) Information security can be both a process and a project because it is in fact a continuous series of projects.

A)True

B)False

Answer: False

Q3) A manager has many roles to play including informational,interpersonal,and decisional.

A)True

B)False Answer: True

Q4) The term ____________________ refers to the end result of a planning process. Answer: goal

To view all questions and flashcards with answers, click on the resource link above. Page 3

Chapter 2: Planning for Security

Available Study Resources on Quizplus for this Chatper

123 Verified Questions

123 Flashcards

Source URL: https://quizplus.com/quiz/46800

Sample Questions

Q1) A SDLC-based project may be started by an event-driven or a ____ impetus.

A) plan-driven

B) process-driven

C) sequence-driven

D) personnel-driven

Answer: A

Q2) ____ are responsible for the security and use of a particular set of information.

A) Data owners

B) Data users

C) Data custodians

D) Security managers

Answer: A

Q3) The primary goal of internal monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

A)True

B)False

Answer: True

To view all questions and flashcards with answers, click on the resource link above.

Chapter 3: Planning for Contingencies

Available Study Resources on Quizplus for this Chatper

114 Verified Questions

114 Flashcards

Source URL: https://quizplus.com/quiz/46801

Sample Questions

Q1) Dust contamination can ____.

A) damage the building that houses the information systems

B) shorten the lives of information systems

C) cause fires or other disasters

D) disrupt access to the building that houses the information systems

Answer: B

Q2) The \(\text {\underline{ business impact analysis} }\)

provides the CP team with information about systems and the threats they face._________________________

A)True

B)False

Answer: True

Q3) The \(\text {\underline{ IR Plan } }\)

is the component of contingency planning that focuses on restoring operations at the primary site._________________________

A)True

B)False

Answer: False

To view all questions and flashcards with answers, click on the resource link above. Page 5

Chapter 4: Information Security Policy

Available Study Resources on Quizplus for this Chatper

133 Verified Questions

133 Flashcards

Source URL: https://quizplus.com/quiz/46802

Sample Questions

Q1) In order to avoid reprisal or retaliation against employees,reporting of violations of policy should be set up to be ____________________ .

Q2) In some organizations,that which is not permitted is ____________________ while in other organizations,the reverse is true.

Q3) ____________________ servers take organization-specific policies and code them in a special machine-readable language.

Q4) A(n)enterprise information security policy is a type of information security policy that provides detailed,targeted guidance to instruct all members of the organization in the use of technology-based systems._________________________

A)True

B)False

Q5) ____ are used to create procedures.

A) Guidelines

B) Standards

C) Practices

D) Profiles

Q6) A quality information security program begins and ends with

To view all questions and flashcards with answers, click on the resource link above. Page 6

Chapter 5: Developing the Security Program

Available Study Resources on Quizplus for this Chatper

133 Verified Questions

133 Flashcards

Source URL: https://quizplus.com/quiz/46803

Sample Questions

Q1) The security education,training,and awareness (SETA)program is designed to ____ by/of members of the organization.

A) reduce the occurrence of external attacks

B) improve the operations

C) reduce the incidence of accidental security breaches

D) increase the efficiency

Q2) The ____ is primarily responsible for the assessment,management,and implementation of the program that secures the organization's information.

A) CEO

B) CIO

C) CISO

D) COO

Q3) In the on-the-job method of training,a trainer works with each trainee on an individual basis._________________________

A)True

B)False

Q4) Distance learning/Web seminars can be low- or no-cost.

A)True

B)False

To view all questions and flashcards with answers, click on the resource link above. Page 7

Chapter 6: Security Management Models

Available Study Resources on Quizplus for this Chatper

120 Verified Questions

120 Flashcards

Source URL: https://quizplus.com/quiz/46804

Sample Questions

Q1) In rule-based access controls,access is granted based on a set of rules which may be specified by the central authority.

A)True

B)False

Q2) Access to a specific set of information may be dependent on its subject matter is called ____.

A) content-dependent access controls

B) constrained user interfaces

C) temporal isolation

D) None of these

Q3) Which of the following is NOT a change control principle of the Clark-Wilson model?

A) No changes by unauthorized subjects

B) No unauthorized changes by authorized subjects

C) No changes by authorized subjects without external validation

D) The maintenance of internal and external consistency

Q4) A convenience store safe that can only be opened during store hours is an example of the ____________________ isolation access control.

Q5) A(n)____________________ is the outline of an information security blueprint.

To view all questions and flashcards with answers, click on the resource link above. Page 8

Chapter 7: Security Management Practices

Available Study Resources on Quizplus for this Chatper

114 Verified Questions

114 Flashcards

Source URL: https://quizplus.com/quiz/46805

Sample Questions

Q1) Another problem with benchmarking is that no two organizations are similar._________________________

A)True

B)False

Q2) Which of the following is NOT one of the three types of performance measures used by organizations?

A) Those that determine the effectiveness of the execution of information security policy

B) Those that determine the effectiveness and/or efficiency of the delivery of information security services

C) Those that assess the impact of budgetary shortfalls in information security on the organization or its mission

D) All of these are types of performance measures used by organizations

Q3) Which of the following is the last phase in the NIST process for performance measures implementation?

A) Apply corrective actions

B) Obtain resources

C) Repeat the process

D) Obtain management support

To view all questions and flashcards with answers, click on the resource link above.

Chapter 8: Risk Management: Identifying and Assessing Risk

Available Study Resources on Quizplus for this Chatper

78 Verified Questions

78 Flashcards

Source URL: https://quizplus.com/quiz/46806

Sample Questions

Q1) Almost every organization is aware of its image in the local,national,and international spheres.Loss or ____ of some assets would prove especially embarrassing.

A) theft

B) deletion

C) exposure

D) destruction

Q2) Information technology managers and technicians are the defenders of information._________________________

A)True

B)False

Q3) Having an established risk management program means that an organization's assets are completely protected.

A)True

B)False

Q4) A community of management and users that is well trained and informed about threats facing the organization can be crucial in the early detection and response process.

A)True

B)False

To view all questions and flashcards with answers, click on the resource link above. Page 10

Chapter 9: Risk Management: Controlling Risk

Available Study Resources on Quizplus for this Chatper

105 Verified Questions

105 Flashcards

Source URL: https://quizplus.com/quiz/46807

Sample Questions

Q1) ISO ____ is the ISO standard for the performance of risk management,and includes a five-stage risk management methodology.

A) 27001

B) 27002

C) 27004

D) 27005

Q2) Due care and due diligence occur when an organization adopts a certain minimum level of security as what any ____ organization would do in similar circumstances.

A) hybrid

B) modern

C) prudent

D) benchmarking

Q3) Explain any two practical guidelines to follow in risk control strategy selection.

Q4) The effectiveness of controls should be ____________________ and measured regularly once a control strategy has been selected.

Q5) The element of remaining risk after vulnerabilities have been controlled is referred to as ____________________ risk.

To view all questions and flashcards with answers, click on the resource link above.

Chapter 10: Protection Mechanisms

Available Study Resources on Quizplus for this Chatper

133 Verified Questions

133 Flashcards

Source URL: https://quizplus.com/quiz/46808

Sample Questions

Q1) ____________________ is the organized research of Internet addresses owned or controlled by a target organization,identified from public Internet data sources..

Q2) ____ are scanning and analysis tools that are capable of scanning networks for very detailed information.

A) Port scanners

B) Content filters

C) Vulnerability scanners

D) Packet sniffers

Q3) Trap and Trace applications collect and analyze copies of packets from the network.

A)True

B)False

Q4) Second generation of firewalls (stateful inspection firewalls)keeps track of each network connection established between internal and external systems using a state table.

A)True

B)False

Q5) Bastion host is also referred to as a(n)____________________ host.

Q6) Transport and ____________________ are the two IPSec modes of operation.

To view all questions and flashcards with answers, click on the resource link above. Page 12

Chapter 11: Personnel and Security

Available Study Resources on Quizplus for this Chatper

133 Verified Questions

133 Flashcards

Source URL: https://quizplus.com/quiz/46809

Sample Questions

Q1) The security ____________________ has the responsibility of interpreting and assisting with the implementation of information security policies and standards.

Q2) When conducting security checks on potential employees,organizations must comply with local regulations,including the Fair Credit Reporting Act (FCRA)regarding the use of personal information in employment practices._________________________

A)True

B)False

Q3) Organizations should conduct periodic security awareness and training activities to keep security at the forefront of employees' minds and minimize employee mistakes._________________________

A)True

B)False

Q4) The ____ examination was developed by the International Society of Forensic Computer Examiners.

A) CCE

B) TICSA

C) SSCP

D) CISM

To view all questions and flashcards with answers, click on the resource link above. Page 13

Chapter 12: Law and Ethics

Available Study Resources on Quizplus for this Chatper

113 Verified Questions

113 Flashcards

Source URL: https://quizplus.com/quiz/46810

Sample Questions

Q1) A(n)search warrant is sworn testimony that certain facts are in the possession of the investigating officer that the officer believes warrant the examination of specific items located at a specific place._________________________

A)True

B)False

Q2) The Economic Espionage Act addresses the area of ____.

A) criminal intent

B) trade secrets

C) accountability

D) cryptography

Q3) ____________________ law is a subset of civil law,which allows individuals to seek recourse against others in the event of personal,financial,or physical injury.

Q4) ____ law embodies a wide variety of laws pertaining to relationships between and among individuals and organizations.

A) Civil

B) Criminal

C) Ethical

D) Tort

To view all questions and flashcards with answers, click on the resource link above. Page 14