Emergency Management for IT Systems
Chapter Exam Questions
Course Introduction
This course explores the principles and practices of emergency management as they relate to information technology systems. Students will learn to identify potential threats and vulnerabilities to IT infrastructure, develop comprehensive incident response plans, and coordinate disaster recovery efforts. Topics include risk assessment, business continuity planning, regulatory and legal considerations, and crisis communication strategies. Through case studies and simulations, students will gain practical experience in preparing for, responding to, and recovering from IT-related emergencies to ensure minimal disruption and data loss within organizations.
Recommended Textbook
Principles of Incident Response and Disaster Recovery 1st Edition by Michael E. Whitman
Available Study Resources on Quizplus
11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243 Page 2
Chapter 1: Contingency Planning Within Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) An information security policy provides rules for the protection of the information assets of the organization.
A)True
B)False
Answer: True
Q2) The ____ has been the industry standard for computer security since the development of the mainframe.
A)disaster recovery plan
B)C.I.A.triangle
C)strategic plan
D)asset classification
Answer: B
Q3) What is the difference between transference and mitigation?
Answer: Transference is the control approach that attempts to shift the risk to other assets,other processes,or other organizations.Mitigation is the control approach that attempts to reduce the impact caused by the exploitation of vulnerability through planning and preparation.
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) A(n)____ must lead the project and make sure a sound project planning process is used,a complete and useful project plan is developed,and project resources are prudently managed to reach the goals of the project.
A)incident manager
B)champion
C)crisis manager
D)project manager
Answer: D
Q2) List five deliberate software attacks.
Answer: 1.E-mail viruses and worms
2.E-mail-based social engineering
3.Web-based malicious scripts
4.Denial-of-service attacks on servers
5.Spyware and malicious adware
Q3) Effective contingency planning begins with effective policy.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) What are the advantages and disadvantages of outsourcing the incident response process?
Answer: Advantages
Services provided by professionals trained in IR 24/7 monitoring
Early notification of potential problems in region
Formal reports and briefings on attacks and response
Equipment specified and installed by well-trained professionals
No additional personnel costs or training requirements
Disadvantages
Potential loss of control of response to incidents
Possible exposure of classified organizational data to service providers
Locked in to proprietary equipment and services
Loss of services when contract expires,unless renewed
Loss of customization to the needs of each organization
Organization's needs subjugated to service provider's needs
More important/prestigious companies given preference in response over smaller less prestigious ones
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) What are the advantages and disadvantages of NIDS?
Q2) The Electronic Communications Protection Act prohibits the recording of wire- or cable-based communications unless an exception applies.Briefly discuss four of these exceptions.
Q3) What are honeypots? Briefly describe each of the two general types.
Q4) Tool used to identify which computers are active on a network,as well as which ports and services are active on the computers,what function or role the machines may be fulfilling,and so on.
A)Intrusion detection system
B)HIDS
C)Signature-based IDS
D)Enticement
E)Entrapment
F)Alarm clustering
G)NIDS
H)Nmap
I)Scanning utility
Q5) Briefly describe the tasks involved in managing logs.
Page 6
Q6) A(n)____________________ monitors traffic on a segment of an organization's network.
To view all questions and flashcards with answers, click on the resource link above.
Page 7
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) What factors should be considered when determining the costs associated with an incident?
Q2) A search in which the suspect never knows a search occurred,because the scene is restored to its original state is called a ____.
A)white bag operation
B)blue bag operation
C)green bag operation
D)black bag operation
Q3) What conditions must be met before a private organization can search an employee's computer?
Q4) A(n)____ is a document containing contact information for the individuals that need to be notified in the event of an actual incident.
A)sequential roster
B)hierarchical roster
C)alert roster
D)root roster
Q5) Discuss five key steps in the Apprehend and Prosecute reaction strategy.
Q6) List five incident containment strategies.
8
Q7) What is the three-step methodology followed by computer forensics?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) ____________________ technology is designed to replace operating systems and services when they fail.
Q2) ____ provides duplication of server data storage by using multiple hard drive volumes,as was described earlier in the section on RAID level 1.
A)Disk striping
B)Parity
C)Mirroring
D)Hot swapping
Q3) The ____ method of backup uses a rotation of six sets of media and is perhaps the most simple and well known.
A)six tape rotation
B)six-day rotation
C)Tower of Hanoi
D)six night rotation
Q4) Most backups are conducted during twilight hours,when systems activity is lowest,and the probability of user interruption is limited.
A)True
B)False
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) Once the incident has been contained,and all signs of the incident removed,the ____ phase begins.
A)actions after
B)black bag operation
C)chain of custody
D)blue bag operation
Q2) ____ strategies should emphasize the mainframe's data storage capabilities and underlying architecture.
A)BIA
B)Contingency
C)Maintenance
D)Redundant
Q3) List five strategies that should be considered for distributed systems.
Q4) Natural disasters such as earthquakes can usually be mitigated with multipurpose casualty insurance.
A)True
B)False
Q5) List five contingency strategies that should be considered for LANs.
Page 10
Q6) List six strategies that should be considered for desktop computer and portable systems.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) ____ requires effective backup strategies and flexible hardware configurations.
A)War gaming
B)DR plan simulation
C)Data recovery
D)System response
Q2) The alert roster must be tested more frequently than other components of the plans because it is the area subject to change due to employee turnover.
A)True
B)False
Q3) Focuses on functions that are not as critical.
A)Storage recovery team
B)Vendor relationships
C)Testing
D)Alert roster
E)Sequential roster
F)Recovery phase
G)Resumption phase
H)Restoration phase
I)Data-management practices
Q4) Briefly discuss the five phases of the DR recovery plan.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) ____ involves the batch transfer of data to an off-site facility.
A)Database shadowing
B)Remote journaling
C)Six-tape rotation
D)Electronic vaulting
Q2) Unlike DR planning,the identification of critical business functions and the resources to support them are the cornerstone of the process used to create the business continuity (BC)plan.
A)True
B)False
Q3) In the ____ section of the business continuity policy,the training requirements for the various employee groups are defined and highlighted.
A)scope
B)training requirements
C)roles and responsibilities
D)special considerations
Q4) What is the difference between the recovery time objective and the recovery point objective?
Page 13
Q5) Discuss five tips for effective BC planning.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) When implementing any BC strategy at an alternate site,the IT staff involved must sustain the backup strategies and practices used at the primary site.
A)True
B)False
Q2) Often disregarded or fall by the wayside during plan development,resulting in a greater risk exposure during recovery operations.
A)Trigger point
B)Preparation undertaken by an organization
C)Network recovery team
D)Security
E)Insurance
F)BC plan
G)BC review
H)Information systems security control
I)Plan
Q3) The simplest way to handle the relocation to the primary site is to schedule the move to occur during weekday evenings.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) List four typical causes of a crisis.
Q2) Cross-training provides a mechanism to get everyone out of the crime scene and thus prevent contamination of possible evidentiary material.
A)True
B)False
Q3) The ____ is responsible for managing all communications between the CM team,management,employees,and the public,including the media and local and state governments.
A)emergency services coordinator
B)human resources coordinator
C)communications coordinator
D)team leader
Q4) A(n)____ is a list of officials ranging from an individual's immediate supervisor through the top executive of the organization.
A)emergency report
B)chain of command
C)cross-training
D)crisis report
Q5) What is the purpose of a crisis management identification card?
To view all questions and flashcards with answers, click on the resource link above. Page 15