Question 1 10 out of 10 points A(n) ____ entails a detailed examination of the events that occurred fro m first detection

to final recovery. Answer Selected Answer: Correct Answer: Question 2 0 out of 10 points In ____, individuals act as if an actual incident occurred, and begin pe rforming their required tasks and executing the necessary procedures, without in terfering with the normal operations of the business. Answer Selected Answer: Correct Answer: Question 3 0 out of 10 points ____ ensures that critical business functions can continue if a disaster occurs. Answer Selected Answer: Correct Answer: Question 4 10 out of 10 points The ____ plan focuses on the immediate response to an incident. Answer Selected Answer: Correct Answer: Question 5 10 out of 10 points The IR Plan is usually activated ____. Answer Selected Answer: Correct Answer: Question 6 0 out of 10 points When a disaster threatens the viability of an organization at the primar y site, the ____ is started. Answer Selected Answer: Correct Answer: Question 7 incident response process business continuity process when an incident is detected when an incident is detected IR IR Disaster recovery planning Business continuity planning a simulation parallel testing after-action review after-action review

10 out of 10 points Dust contamination can ____. Answer Selected Answer: Correct Answer: Question 8 0 out of 10 points A(n) ____ determines the extent of the breach of confidentiality, integr ity, and availability of information and information assets. Answer Selected Answer: Correct Answer: Question 9 0 out of 10 points As part of DR plan readiness, each employee should have two types of ___ _ information cards in his or her possession at all times. Answer Selected Answer: Correct Answer: Question 10 0 out of 10 points Which of the following is true about a hot site? Answer Selected Answer: It includes computing equipment and peripherals with servers but not client workstations. Correct Answer: It duplicates computing resources, peripherals, phone system s, applications, and workstations. Question 11 10 out of 10 points No computer hardware or peripherals are provided in a ____. Answer Selected Answer: Correct Answer: Question 12 0 out of 10 points In the event of an incident or disaster, the ____ team sets up and start s off-site operations. Answer Selected Answer: Correct Answer: Question 13 10 out of 10 points CP business continuity cold site cold site insurance emergency damage report incident damage assessment shorten the lives of information systems shorten the lives of information systems

A document that contains contact information on the individuals to be no tified in the event of an actual incident is called a(n) ____. Answer Selected Answer: Correct Answer: Question 14 0 out of 10 points The responsibility for creating an organizations IR Plan usually falls to the ____. Answer Selected Answer: Correct Answer: Question 15 10 out of 10 points ____ is the process of examining a possible incident and determining whe ther it constitutes an actual incident. Answer Selected Answer: Correct Answer: Question 16 10 out of 10 points A warm site ____. Answer Selected Answer: Correct Answer: Question 17 0 out of 10 points Which of the following is an example of a slow-onset disaster? Answer Selected Answer: Correct Answer: Question 18 0 out of 10 points Which of the following is an example of a rapid-onset disaster? Answer Selected Answer: Correct Answer: Pest infestation Flood Mud flow Pest infestation includes computer equipment includes computer equipment Incident classification Incident classification CIO CISO alert roster alert roster

Question 19 10 out of 10 points

The project manager of the CP team is often the ____ of the organization . Answer Selected Answer: Correct Answer: Question 20 0 out of 10 points The two ways to activate an alert roster are sequentially and ____. Answer Selected Answer: Correct Answer: dynamically hierarchically CISO CISO

Question 1 0 out of 10 points Which of the following is a part of the incident recovery process? Answer Selected Answer: crisis Correct Answer: occur and spread Question 2 0 out of 10 points In CP, an unexpected event is called a(n) ____. Answer Selected Answer: Correct Answer: Question 3 0 out of 10 points In the event of an incident or disaster, the ____ team sets up and start s off-site operations. Answer Selected Answer: Correct Answer: Question 4 0 out of 10 points A contract between two organizations in which each party agrees to assis t the other in the event of a disaster is called a ____. incident response business continuity occurrence incident Supporting personnel and their loved ones during the Identifying the vulnerabilities that allowed the incident to

Answer Selected Answer: Correct Answer: Question 5 0 out of 10 points The ____ plan focuses on restoring operations at the primary site. Answer Selected Answer: Correct Answer: Question 6 10 out of 10 points A(n) ____ determines the extent of the breach of confidentiality, integr ity, and availability of information and information assets. Answer Selected Answer: Correct Answer: Question 7 10 out of 10 points A(n) ____ is a detailed description of the activities that occur during an attack. Answer Selected Answer: Correct Answer: Question 8 0 out of 10 points A(n) ____ shows the estimated cost of the best, worst, and most likely o utcomes of an attack. Answer Selected Answer: Correct Answer: Question 9 0 out of 10 points Which of the following can be fully functional within minutes? Answer Selected Answer: Correct Answer: Question 10 0 out of 10 points Crisis management is designed to deal primarily with ____. Answer Selected Answer: computer systems All of these A hot site attack message attack scenario end case attack profile attack profile incident damage assessment incident damage assessment FR DR service bureau mutual agreement

Correct Answer: Question 11 0 out of 10 points

people

A warm site ____. Answer Selected Answer: Correct Answer: Question 12 0 out of 10 points Which of the following is true about a hot site? Answer Selected Answer: It includes computing equipment and peripherals with servers but not client workstations. Correct Answer: It duplicates computing resources, peripherals, phone system s, applications, and workstations. Question 13 0 out of 10 points The ____ team collects information about information systems and the thr eats they face, and creates the contingency plans for incident response, disaste r recovery, and business continuity. Answer Selected Answer: Correct Answer: Question 14 0 out of 10 points The project manager of the CP team is often the ____ of the organization . Answer Selected Answer: Correct Answer: Question 15 0 out of 10 points Which of the following is an example of a slow-onset disaster? Answer Selected Answer: Correct Answer: Question 16 0 out of 10 points ____ is a method of testing contingency plans in which each involved per son works individually to simulate the performance of each task. Answer Selected Answer: A desk check Mud flow Pest infestation CEO CISO disaster recovery CP can be fully functional within minutes includes computer equipment

Correct Answer: Question 17 0 out of 10 points

A simulation

A ____ is simply an empty room with standard heating, air conditioning, and electrical service. Answer Selected Answer: Correct Answer: Question 18 0 out of 10 points Which of the following is a possible indicator of an actual incident? Answer Selected Answer: Correct Answer: Question 19 0 out of 10 points The DRP is usually managed by the ____. Answer Selected Answer: Correct Answer: Question 20 0 out of 10 points The ____ plan enables the business to continue to function at an alterna te site. Answer Selected Answer: Correct Answer: IR BC CEO IT community of interest Activities at unexpected times Unusual consumption of computing resources primary site cold site

Wednesday, November 14, 2012 2:12:26 PM EST Question 1 0 out of 10 points Which of the following is true about a hot site? Answer Selected Answer: It includes computing equipment and peripherals with servers but not client workstations. Correct Answer: It duplicates computing resources, peripherals, phone system s, applications, and workstations. Question 2 0 out of 10 points A document that contains contact information on the individuals to be no tified in the event of an actual incident is called a(n) ____. Answer Selected Answer: notification table

Correct Answer: Question 3 10 out of 10 points

alert roster

The IR Plan is usually activated ____. Answer Selected Answer: Correct Answer: Question 4 10 out of 10 points ____ is the process of examining a possible incident and determining whe ther it constitutes an actual incident. Answer Selected Answer: Correct Answer: Question 5 0 out of 10 points Which of the following is a definite indicator of an actual incident? Answer Selected Answer: Correct Answer: Question 6 0 out of 10 points Dust contamination can ____. Answer Selected Answer: ems Correct Answer: Question 7 0 out of 10 points The ____ plan focuses on restoring operations at the primary site. Answer Selected Answer: Correct Answer: Question 8 10 out of 10 points ____ ensures that critical business functions can continue if a disaster occurs. Answer Selected Answer: Correct Answer: Question 9 Business continuity planning Business continuity planning FR DR damage the building that houses the information syst shorten the lives of information systems Unusual system crashes Use of dormant accounts Incident classification Incident classification when an incident is detected when an incident is detected

0 out of 10 points A contract between two organizations in which each party agrees to assis t the other in the event of a disaster is called a ____. Answer Selected Answer: Correct Answer: Question 10 0 out of 10 points Which of the following is an example of a rapid-onset disaster? Answer Selected Answer: Correct Answer: Question 11 10 out of 10 points A ____ is simply an empty room with standard heating, air conditioning, and electrical service. Answer Selected Answer: Correct Answer: Question 12 0 out of 10 points Which of the following is a probable indicator of an actual incident? Answer Selected Answer: Correct Answer: Question 13 0 out of 10 points In ____, individuals act as if an actual incident occurred, and begin pe rforming their required tasks and executing the necessary procedures, without in terfering with the normal operations of the business. Answer Selected Answer: Correct Answer: Question 14 0 out of 10 points The two ways to activate an alert roster are sequentially and ____. Answer Selected Answer: Correct Answer: Question 15 0 out of 10 points exponentially hierarchically a simulation parallel testing Presence or execution of unknown programs Presence of new accounts cold site cold site Famine Flood service bureau mutual agreement

No computer hardware or peripherals are provided in a ____. Answer Selected Answer: Correct Answer: Question 16 0 out of 10 points A ____ activation requires that the first person call designated people on the roster, who in turn call other designated people, and so on. Answer Selected Answer: Correct Answer: Question 17 0 out of 10 points In a ____ activation, a single person calls all the people on the roster . Answer Selected Answer: Correct Answer: Question 18 0 out of 10 points The project manager of the CP team is often the ____ of the organization . Answer Selected Answer: Correct Answer: Question 19 0 out of 10 points A(n) ____ is a detailed description of the activities that occur during an attack. Answer Selected Answer: Correct Answer: Question 20 0 out of 10 points The DRP is usually managed by the ____. Answer Selected Answer: Correct Answer: COO IT community of interest attack message attack profile CEO CISO hierarchical sequential sequential hierarchical hot site cold site

Wednesday, November 14, 2012 2:14:34 PM EST Question 1 10 out of 10 points A ____ is simply an empty room with standard heating, air conditioning,

and electrical service. Answer Selected Answer: Correct Answer: Question 2 0 out of 10 points Which of the following is a part of the incident recovery process? Answer Selected Answer: Determining the events impact on normal business oper ations and, if necessary, making a disaster declaration Correct Answer: Identifying the vulnerabilities that allowed the incident to occur and spread Question 3 0 out of 10 points The ____ plan focuses on restoring operations at the primary site. Answer Selected Answer: Correct Answer: Question 4 10 out of 10 points The BC Plan is most properly managed by the ____. Answer Selected Answer: Correct Answer: Question 5 0 out of 10 points No computer hardware or peripherals are provided in a ____. Answer Selected Answer: Correct Answer: Question 6 0 out of 10 points When dealing with an incident, the last action the IR team takes is to _ ___. Answer Selected Answer: Correct Answer: Question 7 10 out of 10 points ____ is the transfer of live transactions to an off-site facility. Answer restore data from backups conduct an after-action review hot site cold site CEO CEO BC DR cold site cold site

Selected Answer: Correct Answer: Question 8 0 out of 10 points

Remote journaling Remote journaling

A warm site ____. Answer Selected Answer: Correct Answer: Question 9 0 out of 10 points In the event of an incident or disaster, the ____ team sets up and start s off-site operations. Answer Selected Answer: Correct Answer: Question 10 10 out of 10 points ____ is a method of testing contingency plans in which each involved per son works individually to simulate the performance of each task. Answer Selected Answer: Correct Answer: Question 11 0 out of 10 points The IR Plan is usually activated ____. Answer Selected Answer: Correct Answer: Question 12 0 out of 10 points The DRP is usually managed by the ____. Answer Selected Answer: Correct Answer: Question 13 10 out of 10 points The two ways to activate an alert roster are sequentially and ____. Answer Selected Answer: Correct Answer: Question 14 hierarchically hierarchically CEO IT community of interest once the BCP is activated when an incident is detected A simulation A simulation CP business continuity costs more than a hot site includes computer equipment

10 out of 10 points In a ____ activation, a single person calls all the people on the roster . Answer Selected Answer: Correct Answer: Question 15 0 out of 10 points Organizations located in coastal areas are more likely to experience ___ _ than organizations in other cities. Answer Selected Answer: Correct Answer: Question 16 0 out of 10 points Operations at the primary business site are reestablished by the ____ te am. Answer Selected Answer: Correct Answer: Question 17 0 out of 10 points The ____ team collects information about information systems and the thr eats they face, and creates the contingency plans for incident response, disaste r recovery, and business continuity. Answer Selected Answer: Correct Answer: Question 18 0 out of 10 points ____ is the bulk batch-transfer of data to an off-site facility. Answer Selected Answer: Correct Answer: Question 19 10 out of 10 points A document that contains contact information on the individuals to be no tified in the event of an actual incident is called a(n) ____. Answer Selected Answer: Correct Answer: Question 20 alert roster alert roster Database shadowing Electronic vaulting incident response CP CP disaster recovery earthquakes tsunamis sequential sequential

0 out of 10 points Determining whether a possible incident is an actual incident is the res ponsibility of the ____ team. Answer Selected Answer: Correct Answer: CP IR

Question 1 10 out of 10 points The IR Plan is usually activated ____. Answer Selected Answer: Correct Answer: Question 2 0 out of 10 points ____ is the bulk batch-transfer of data to an off-site facility. Answer Selected Answer: Correct Answer: Question 3 0 out of 10 points The BC Plan is most properly managed by the ____. Answer Selected Answer: Correct Answer: Question 4 0 out of 10 points A ____ is simply an empty room with standard heating, air conditioning, and electrical service. Answer Selected Answer: Correct Answer: Question 5 10 out of 10 points Which of the following is true about a hot site? Answer Selected Answer: It duplicates computing resources, peripherals, phon e systems, applications, and workstations. Correct Answer: It duplicates computing resources, peripherals, phone system s, applications, and workstations. Question 6 primary site cold site CISO CEO Database shadowing Electronic vaulting when an incident is detected when an incident is detected

0 out of 10 points Crisis management is designed to deal primarily with ____. Answer Selected Answer: Correct Answer: Question 7 10 out of 10 points The DRP is usually managed by the ____. Answer Selected Answer: Correct Answer: Question 8 10 out of 10 points Which of the following is a possible indicator of an actual incident? Answer Selected Answer: Correct Answer: Question 9 0 out of 10 points Organizations located in coastal areas are more likely to experience ___ _ than organizations in other cities. Answer Selected Answer: Correct Answer: Question 10 0 out of 10 points The project manager of the CP team is often the ____ of the organization . Answer Selected Answer: Correct Answer: Question 11 10 out of 10 points A scripted set of instructions about an incident is known as a(n) ____. Answer Selected Answer: Correct Answer: Question 12 0 out of 10 points A ____ activation requires that the first person call designated people on the roster, who in turn call other designated people, and so on. alert message alert message CIO CISO earthquakes tsunamis Unusual consumption of computing resources Unusual consumption of computing resources IT community of interest IT community of interest network data people

Answer Selected Answer: Correct Answer: Question 13 0 out of 10 points Which of the following is an example of a slow-onset disaster? Answer Selected Answer: Correct Answer: Question 14 10 out of 10 points A(n) ____ determines the extent of the breach of confidentiality, integr ity, and availability of information and information assets. Answer Selected Answer: Correct Answer: Question 15 10 out of 10 points ____ is the storage of duplicate online transaction data, along with the duplication of the databases at the remote site on a redundant server. Answer Selected Answer: Correct Answer: Question 16 10 out of 10 points The ____ plan focuses on restoring operations at the primary site. Answer Selected Answer: Correct Answer: Question 17 10 out of 10 points The ____ plan focuses on the immediate response to an incident. Answer Selected Answer: Correct Answer: Question 18 0 out of 10 points ____ is the transfer of live transactions to an off-site facility. Answer Selected Answer: Correct Answer: Electronic vaulting Remote journaling IR IR DR DR Database shadowing Database shadowing incident damage assessment incident damage assessment Earthquake Pest infestation serial hierarchical

 Question 19 0 out of 10 points In ____, individuals act as if an actual incident occurred, and begin pe rforming their required tasks and executing the necessary procedures, without in terfering with the normal operations of the business. Answer Selected Answer: Correct Answer: Question 20 0 out of 10 points In CP, an unexpected event is called a(n) ____. Answer Selected Answer: Correct Answer: disaster incident a structured walk-through parallel testing

Question 1 10 out of 10 points The BC Plan is most properly managed by the ____. Answer Selected Answer: Correct Answer: Question 2 10 out of 10 points When a disaster threatens the viability of an organization at the primar y site, the ____ is started. Answer Selected Answer: Correct Answer: Question 3 10 out of 10 points The ____ team collects information about information systems and the thr eats they face, and creates the contingency plans for incident response, disaste r recovery, and business continuity. Answer Selected Answer: Correct Answer: Question 4 10 out of 10 points CP CP business continuity process business continuity process CEO CEO

A scripted set of instructions about an incident is known as a(n) ____. Answer Selected Answer: Correct Answer: Question 5 10 out of 10 points ____ is the transfer of live transactions to an off-site facility. Answer Selected Answer: Correct Answer: Question 6 10 out of 10 points Which of the following is a definite indicator of an actual incident? Answer Selected Answer: Correct Answer: Question 7 10 out of 10 points ____ ensures that critical business functions can continue if a disaster occurs. Answer Selected Answer: Correct Answer: Question 8 10 out of 10 points ____ is the storage of duplicate online transaction data, along with the duplication of the databases at the remote site on a redundant server. Answer Selected Answer: Correct Answer: Question 9 10 out of 10 points A warm site ____. Answer Selected Answer: Correct Answer: Question 10 10 out of 10 points A(n) ____ determines the extent of the breach of confidentiality, integr ity, and availability of information and information assets. Answer includes computer equipment includes computer equipment Database shadowing Database shadowing Business continuity planning Business continuity planning Use of dormant accounts Use of dormant accounts Remote journaling Remote journaling alert message alert message

Selected Answer: Correct Answer: Question 11 10 out of 10 points

incident damage assessment incident damage assessment

Which of the following is an example of a rapid-onset disaster? Answer Selected Answer: Correct Answer: Question 12 10 out of 10 points A contract between two organizations in which each party agrees to assis t the other in the event of a disaster is called a ____. Answer Selected Answer: Correct Answer: Question 13 10 out of 10 points A ____ is simply an empty room with standard heating, air conditioning, and electrical service. Answer Selected Answer: Correct Answer: Question 14 10 out of 10 points Which of the following is true about a hot site? Answer Selected Answer: It duplicates computing resources, peripherals, phon e systems, applications, and workstations. Correct Answer: It duplicates computing resources, peripherals, phone system s, applications, and workstations. Question 15 10 out of 10 points A(n) ____ entails a detailed examination of the events that occurred fro m first detection to final recovery. Answer Selected Answer: Correct Answer: Question 16 10 out of 10 points ____ is the bulk batch-transfer of data to an off-site facility. Answer Selected Answer: Electronic vaulting after-action review after-action review cold site cold site mutual agreement mutual agreement Flood Flood

Correct Answer: Question 17 10 out of 10 points

Electronic vaulting

A ____ is a fully configured computer facility that needs only the lates t data backups and the personnel to function. Answer Selected Answer: Correct Answer: Question 18 10 out of 10 points The ____ plan focuses on restoring operations at the primary site. Answer Selected Answer: Correct Answer: Question 19 10 out of 10 points The two ways to activate an alert roster are sequentially and ____. Answer Selected Answer: Correct Answer: Question 20 10 out of 10 points A(n) ____ is a detailed description of the activities that occur during an attack. Answer Selected Answer: Correct Answer: attack profile attack profile hierarchically hierarchically DR DR hot site hot site