Business Continuity and Disaster Recovery
Test Preparation
Course Introduction
This course explores the essential principles and practices of business continuity and disaster recovery, equipping students with the knowledge to ensure organizational resilience in the face of unexpected disruptions. Topics include risk assessment, creation and implementation of continuity plans, crisis management, recovery strategies for IT and business operations, and compliance with regulatory requirements. Through case studies and practical exercises, participants learn to identify vulnerabilities, design robust recovery solutions, and maintain critical functions during emergencies, preparing them to safeguard enterprise assets and effectively navigate complex disaster scenarios.
Recommended Textbook
Information Security and IT Risk Management 1st Edition by Manish Agrawal
Available Study Resources on Quizplus
14 Chapters
349 Verified Questions
349 Flashcards
Source URL: https://quizplus.com/study-set/3541
Page 2
Chapter 1: Introduction
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70324
Sample Questions
Q1) HIPAA stands for
A) Health Insurance Portability and Accountability Act
B) Health Insurance Privacy and Accountability Act
C) Health Insurance Privacy and Awareness Act
D) Health Insurance Portability and Awareness Act
Answer: A
Q2) Confidentiality is
A) Protecting information and information systems from unauthorized use
B) Preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information Choices
C) Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity
D) Ensuring timely and reliable access to and use of information
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: System Administration
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70325
Sample Questions
Q1) Linux is
A) An operating system that behaves like UNIX, though it has an independent code base
B) A different brand of UNIX
C) A version of Windows
D) A database system
Answer: A
Q2) A hot spare is a
A) Single point of failure
B) Redundant component that can replace a failed component with no downtime
C) Spare components used to replace failed components as quickly as possible
D) Popular component purchased when it is on sale
Answer: B
Q3) UNIX was developed by
A) Ken Thompson and Dennis Ritchie in 1969
B) Bill Gates and Paul Allen in 1977
C) Edgar F. Codd in 1970
D) Bob Metcalfe in 1973
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: System Administration 2
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70326
Sample Questions
Q1) In the context of system administration, the shell is
A) Software that manages computer hardware and provides common services to user applications
B) Software which controls hardware devices, manages memory, and hides underlying physical hardware from user applications
C) A text based program that allows users to interact with the shell
D) The graphical interface for users to interact with applications
Answer: C
Q2) In the context of system administration, the operating system is
A) Software that manages computer hardware and provides common services to user applications
B) Software which controls hardware devices, manages memory, and hides underlying physical hardware from user applications
C) A text based program that allows users to interact with the shell
D) The graphical interface for users to interact with applications
Answer: A
To view all questions and flashcards with answers, click on the resource link above.
5
Chapter 4: Basic Information Security Model
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70327
Sample Questions
Q1) An unrestricted uploads vulnerability refers to a situation where
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity
Q2) Assets are
A) Resources or information that is to be protected
B) Safeguards used to minimize the impact of threats
C) Capabilities, intentions and attack methods of adversaries to cause harm to assets
D) Weaknesses in an information system that can lead to a compromise of an asset
Q3) The CVE list is
A) A list of all likely impacts of vulnerabilities
B) A list of all known viruses
C) A list of all known information security firms
D) An inventory of known software vulnerabilities
Q4) Vulnerabilities in IT systems can be eliminated through secure coding practices
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Asset Identification and Characterization
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70328
Sample Questions
Q1) In most organizations, the most important assets from the perspective of information security are
A) Hardware assets
B) Information assets
C) Software assets
D) Personnel assets
Q2) An example of a top-down approach to asset identification is
A) Reading the mission statement of the organization
B) Talking to co-workers
C) Reading on-boarding documentation
D) All of the above
Q3) Information assets are
A) Software tools needed to accomplish the organization's mission
B) Digitally stored content owned by an individual or organization
C) Employees whose departure could adversely affect the organization
D) Machinery involved in supporting the business
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Threats and Vulnerabilities
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70329
Sample Questions
Q1) As a threat action, social engineering is
A) An activity performed by agents to compromise assets
B) Convincing users to do something they would not ordinarily do
C) Software that performs simple tasks automatically and repetitively, usually at the direction of another software
D) Malicious content entered by an end user on a web-based system
Q2) In the context of information security, worms are
A) Activities performed by agents to compromise assets
B) Malicious software that uses operating system or application vulnerabilities for propagation
C) Software that performs simple tasks automatically and repetitively, usually at the direction of another software
D) Malicious content entered by an end user on a web-based system
Q3) Phishing is
A) An activity performed by agents to compromise assets
B) Convincing users to do something they would not ordinarily do
C) Using email to try and get a user to divulge confidential information
D) Malicious content entered by an end user on a web-based system
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Encryption Controls
Available Study Resources on Quizplus for this Chatper
24 Verified Questions
24 Flashcards
Source URL: https://quizplus.com/quiz/70330
Sample Questions
Q1) In using public key encryption, messages are deciphered using
A) A public key
B) A shared secret key
C) Any key
D) A private key
Q2) In the context of encryption, a key is
A) A well-defined sequence of steps used to describe cryptographic processes
B) An encryption method that uses no keys
C) A sequence of symbols that controls the operations of encipherment and decipherment
D) Text that is unintelligible to the reader
Q3) Hash functions use
A) 2 keys
B) 1 key
C) 0 keys
D) Any of the above, depending upon the specific hash algorithm
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Identity and Access Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70331
Sample Questions
Q1) Password synchronization technologies
A) Require the presentation of a token for authentication
B) Allow a user to authenticate once and obtain access to all authorized resources
C) Allow nodes in an insecure network to securely identify themselves to each other using tokens
D) Ensure that the user has the same username and password on all systems
Q2) Kerberos has been very useful in securing web applications
A)True
B)False
Q3) Single sign-on technologies
A) Ensure that the user has the same username and password on all systems
B) Have no single point of failure
C) Allow a user to authenticate once and obtain access to all authorized resources
D) Allow nodes in an insecure network to securely identify themselves to each other using tokens
Q4) Kerberos has been very useful in securing corporate desktop infrastructures
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Hardware and Software Controls
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70332
Sample Questions
Q1) A password policy is
A) A set of rules for using passwords
B) Acquiring passwords from storage, network transmission or user knowledge
C) Repeated attempts to authenticate using possible passwords
D) Generating character strings to match existing passwords
Q2) Password capturing is
A) Passwords on the system known to unauthorized users
B) Acquiring passwords from storage, network transmission or user knowledge
C) Repeated attempts to authenticate using possible passwords
D) Generating character strings to match existing passwords
Q3) Patches should always be installed as soon as they become available
A)True
B)False
Q4) The de-militarized zone in the context of information security refers to
A) The network that hosts external services such as email, web and DNS
B) The Internet
C) The internal corporate network
D) The organization's reception area
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Shell Scripting
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70333
Sample Questions
Q1) File users.csv contains lines as: Christine:Riggs:christine.riggs@sunshine.edu. The command to extract emails from the file is
A) cut -d: -f3 users.csv
B) cut -d, -f3 users.csv
C) cut -d: -f1,2,3 users.csv
D) cut -d, -f1,2,3 users.csv
Q2) The first line of an executable script needs to be #!/bin/bash, in order to
A) Inform the shell which shell interpreter to use to execute the script
B) Remind the user of the shell interpreter to use when executing the script
C) Remind the user of the shell interpreter used to create the script
D) Serve as a comment for the shell interpreter when executing the script
Q3) The redirect operator used to send the output of a command to a file is written as A) / B) #
C) | D) >
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Incident Handling
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70334
Sample Questions
Q1) The IRT is
A) A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices
B) The part of the incident response policy that specifies the targets of the policy
C) Staff designated to respond to incidents
D) The act of following applicable laws, regulations, rules, industry codes and contractual obligations
Q2) In the context of monitoring, a false positive is
A) An undetected problem
B) A component that is working intermittently
C) A component that is likely to fail soon
D) An alert that upon further investigation turns out to be not a problem
Q3) The leader of the IRT is preferably
A) Someone from the senior leadership of the organization
B) A technically competent professional with high credibility within the organization
C) The functional leader of the business unit affected by the incident
D) The leader of the IT function within the organization
To view all questions and flashcards with answers, click on the resource link above.
13
Chapter 12: Incident Analysis
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70335
Sample Questions
Q1) Historical login and logout attempts on a Unix/ Linux system are recorded in A) authlog
B) wtmp
C) messages
D) utmp
Q2) Login attempts on a Unix/ Linux system are recorded in
A) authlog
B) messages
C) wtmp
D) utmp
Q3) File timestamps can be useful for all of the following except
A) Identifying files manipulated by the hacker
B) Determine how the hacker compromised the system
C) Identifying the attacker
D) Preventing similar attacks on other similar systems
Q4) Syslog priorities include all of the following except A) debug
B) error
C) audit
D) panic
Page 14
To view all questions and flashcards with answers, click on the resource link above.
Chapter 13: Policies, Standards and Guidelines
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70336
Sample Questions
Q1) A policy is
A) Procedures that tell units when it would be nice if things were operated a certain way, but it is not a requirement to do so
B) Guidelines to users and customers on what is appropriate and what is not appropriate to do with information technology resources
C) A document that records a high-level principle or course of action that has been decided on
D) A defined set of rules, accepted and adopted by several organizations
Q2) From the perspective of information security, export control laws defines
A) Requirements for financial institutions to protect the privacy of their customers' non-public, personal information
B) Protections for the privacy of student education records
C) The responsibilities of top executives of publicly traded companies for the accuracy and timeliness of financial data
D) Prohibitions regarding the unlicensed export of specified materials or information
To view all questions and flashcards with answers, click on the resource link above.
15
Chapter 14: It Risk Analysis and Risk Management
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/70337
Sample Questions
Q1) A certain risk has a 1% likelihood of occurrence in the coming year. If the risk is observed, the organization estimates a loss of $1million. A second risk has a 15% likelihood of occurrence in the coming year. If the second risk is observed, the organization estimates a loss of $100,000. Comparing the two risks
A) Risk 2 is greater than risk 1
B) Risk 1 is greater than risk 2
C) Risk 2 is equal to risk 1
D) Risk 2 is negligible
Q2) In the NIST 800-39 framework, risk assessment
A) Addresses how organizations respond to risks
B) Identifies and aggregates the risks facing the organization
C) Describes the environment in which risk-based decisions are made
D) Evaluates the effectiveness of the organization's risk-management plan
Q3) Internal controls over financial reporting involve all of the following except
A) A process
B) Supervision of the company's principal executives
C) Profit guidance
D) Maintenance of records
To view all questions and flashcards with answers, click on the resource link above. Page 16