Business Continuity and Disaster Recovery Study Guide Questions
Course Introduction
This course explores the principles and practices of business continuity and disaster recovery, emphasizing strategies to ensure organizational resilience in the face of disruptions. Students will learn how to identify risks, develop comprehensive continuity plans, and implement disaster recovery frameworks to minimize operational downtime and data loss. The course covers essential topics such as risk assessment, incident response, data backup solutions, crisis communication, and regulatory compliance. Through case studies and practical exercises, students will gain the skills needed to design and maintain plans that protect business operations and critical assets during unexpected events.
Recommended Textbook
Management of Information Security 3rd Edition by Michael
E. Whitman
Flashcards
Source URL: https://quizplus.com/study-set/2354
Page 2
Chapter 1: Introduction to the Management of Information Security
Available Study Resources on Quizplus for this Chatper
139 Verified Questions
139 Flashcards
Source URL: https://quizplus.com/quiz/46799
Sample Questions
Q1) It is possible to take a very complex operation and diagram it in PERT if you can answer three key questions about each activity.Which of the following is NOT one of them?
A) How long will it take?
B) What activity occurs immediately before this activity?
C) What activity occurs immediate activity after this activity?
D) What other activities require the same resources as this activity?
Answer: D
Q2) Information security can be both a process and a project because it is in fact a continuous series of projects.
A)True
B)False
Answer: False
Q3) A manager has many roles to play including informational,interpersonal,and decisional.
A)True
B)False Answer: True
Q4) The term ____________________ refers to the end result of a planning process. Answer: goal
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Planning for Security
Available Study Resources on Quizplus for this Chatper
123 Verified Questions
123 Flashcards
Source URL: https://quizplus.com/quiz/46800
Sample Questions
Q1) A SDLC-based project may be started by an event-driven or a ____ impetus.
A) plan-driven
B) process-driven
C) sequence-driven
D) personnel-driven
Answer: A
Q2) ____ are responsible for the security and use of a particular set of information.
A) Data owners
B) Data users
C) Data custodians
D) Security managers
Answer: A
Q3) The primary goal of internal monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Planning for Contingencies
Available Study Resources on Quizplus for this Chatper
114 Verified Questions
114 Flashcards
Source URL: https://quizplus.com/quiz/46801
Sample Questions
Q1) Dust contamination can ____.
A) damage the building that houses the information systems
B) shorten the lives of information systems
C) cause fires or other disasters
D) disrupt access to the building that houses the information systems
Answer: B
Q2) The \(\text {\underline{ business impact analysis} }\)
provides the CP team with information about systems and the threats they face._________________________
A)True
B)False
Answer: True
Q3) The \(\text {\underline{ IR Plan } }\)
is the component of contingency planning that focuses on restoring operations at the primary site._________________________
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Information Security Policy
Available Study Resources on Quizplus for this Chatper
133 Verified Questions
133 Flashcards
Source URL: https://quizplus.com/quiz/46802
Sample Questions
Q1) In order to avoid reprisal or retaliation against employees,reporting of violations of policy should be set up to be ____________________ .
Q2) In some organizations,that which is not permitted is ____________________ while in other organizations,the reverse is true.
Q3) ____________________ servers take organization-specific policies and code them in a special machine-readable language.
Q4) A(n)<u>enterprise information</u> security policy is a type of information security policy that provides detailed,targeted guidance to instruct all members of the organization in the use of technology-based systems._________________________
A)True
B)False
Q5) ____ are used to create procedures.
A) Guidelines
B) Standards
C) Practices
D) Profiles
Q6) A quality information security program begins and ends with
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Developing the Security Program
Available Study Resources on Quizplus for this Chatper
133 Verified Questions
133 Flashcards
Source URL: https://quizplus.com/quiz/46803
Sample Questions
Q1) The security education,training,and awareness (SETA)program is designed to ____ by/of members of the organization.
A) reduce the occurrence of external attacks
B) improve the operations
C) reduce the incidence of accidental security breaches
D) increase the efficiency
Q2) The ____ is primarily responsible for the assessment,management,and implementation of the program that secures the organization's information.
A) CEO
B) CIO
C) CISO
D) COO
Q3) In the <u>on-the-job</u> method of training,a trainer works with each trainee on an individual basis._________________________
A)True
B)False
Q4) Distance learning/Web seminars can be low- or no-cost.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Security Management Models
Available Study Resources on Quizplus for this Chatper
120 Verified Questions
120 Flashcards
Source URL: https://quizplus.com/quiz/46804
Sample Questions
Q1) In rule-based access controls,access is granted based on a set of rules which may be specified by the central authority.
A)True
B)False
Q2) Access to a specific set of information may be dependent on its subject matter is called ____.
A) content-dependent access controls
B) constrained user interfaces
C) temporal isolation
D) None of these
Q3) Which of the following is NOT a change control principle of the Clark-Wilson model?
A) No changes by unauthorized subjects
B) No unauthorized changes by authorized subjects
C) No changes by authorized subjects without external validation
D) The maintenance of internal and external consistency
Q4) A convenience store safe that can only be opened during store hours is an example of the ____________________ isolation access control.
Q5) A(n)____________________ is the outline of an information security blueprint.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Security Management Practices
Available Study Resources on Quizplus for this Chatper
114 Verified Questions
114 Flashcards
Source URL: https://quizplus.com/quiz/46805
Sample Questions
Q1) Another problem with benchmarking is that no two organizations are<u> similar</u>._________________________
A)True
B)False
Q2) Which of the following is NOT one of the three types of performance measures used by organizations?
A) Those that determine the effectiveness of the execution of information security policy
B) Those that determine the effectiveness and/or efficiency of the delivery of information security services
C) Those that assess the impact of budgetary shortfalls in information security on the organization or its mission
D) All of these are types of performance measures used by organizations
Q3) Which of the following is the last phase in the NIST process for performance measures implementation?
A) Apply corrective actions
B) Obtain resources
C) Repeat the process
D) Obtain management support
To view all questions and flashcards with answers, click on the resource link above.
9
Chapter 8: Risk Management: Identifying and Assessing Risk
Available Study Resources on Quizplus for this Chatper
78 Verified Questions
78 Flashcards
Source URL: https://quizplus.com/quiz/46806
Sample Questions
Q1) Almost every organization is aware of its image in the local,national,and international spheres.Loss or ____ of some assets would prove especially embarrassing.
A) theft
B) deletion
C) exposure
D) destruction
Q2) Information<u> technology</u> managers and technicians are the defenders of information._________________________
A)True
B)False
Q3) Having an established risk management program means that an organization's assets are completely protected.
A)True
B)False
Q4) A community of management and users that is well trained and informed about threats facing the organization can be crucial in the early detection and response process.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Risk Management: Controlling Risk
Available Study Resources on Quizplus for this Chatper
105 Verified Questions
105 Flashcards
Source URL: https://quizplus.com/quiz/46807
Sample Questions
Q1) ISO ____ is the ISO standard for the performance of risk management,and includes a five-stage risk management methodology.
A) 27001
B) 27002
C) 27004
D) 27005
Q2) Due care and due diligence occur when an organization adopts a certain minimum level of security as what any ____ organization would do in similar circumstances.
A) hybrid
B) modern
C) prudent
D) benchmarking
Q3) Explain any two practical guidelines to follow in risk control strategy selection.
Q4) The effectiveness of controls should be ____________________ and measured regularly once a control strategy has been selected.
Q5) The element of remaining risk after vulnerabilities have been controlled is referred to as ____________________ risk.
To view all questions and flashcards with answers, click on the resource link above.
11
Chapter 10: Protection Mechanisms
Available Study Resources on Quizplus for this Chatper
133 Verified Questions
133 Flashcards
Source URL: https://quizplus.com/quiz/46808
Sample Questions
Q1) ____________________ is the organized research of Internet addresses owned or controlled by a target organization,identified from public Internet data sources..
Q2) ____ are scanning and analysis tools that are capable of scanning networks for very detailed information.
A) Port scanners
B) Content filters
C) Vulnerability scanners
D) Packet sniffers
Q3) Trap and Trace applications collect and analyze copies of packets from the network.
A)True
B)False
Q4) Second generation of firewalls (stateful inspection firewalls)keeps track of each network connection established between internal and external systems using a state table.
A)True
B)False
Q5) Bastion host is also referred to as a(n)____________________ host.
Q6) Transport and ____________________ are the two IPSec modes of operation.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Personnel and Security
Available Study Resources on Quizplus for this Chatper
133 Verified Questions
133 Flashcards
Source URL: https://quizplus.com/quiz/46809
Sample Questions
Q1) The security ____________________ has the responsibility of interpreting and assisting with the implementation of information security policies and standards.
Q2) When conducting security checks on potential employees,organizations must comply with<u> local</u> regulations,including the Fair Credit Reporting Act (FCRA)regarding the use of personal information in employment practices._________________________
A)True
B)False
Q3) Organizations should conduct periodic <u>security awareness and training</u> activities to keep security at the forefront of employees' minds and minimize employee mistakes._________________________
A)True
B)False
Q4) The ____ examination was developed by the International Society of Forensic Computer Examiners.
A) CCE
B) TICSA
C) SSCP
D) CISM
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Law and Ethics
Available Study Resources on Quizplus for this Chatper
113 Verified Questions
113 Flashcards
Source URL: https://quizplus.com/quiz/46810
Sample Questions
Q1) A(n)<u>search warrant </u>is sworn testimony that certain facts are in the possession of the investigating officer that the officer believes warrant the examination of specific items located at a specific place._________________________
A)True
B)False
Q2) The Economic Espionage Act addresses the area of ____.
A) criminal intent
B) trade secrets
C) accountability
D) cryptography
Q3) ____________________ law is a subset of civil law,which allows individuals to seek recourse against others in the event of personal,financial,or physical injury.
Q4) ____ law embodies a wide variety of laws pertaining to relationships between and among individuals and organizations.
A) Civil
B) Criminal
C) Ethical
D) Tort
To view all questions and flashcards with answers, click on the resource link above. Page 14