Module 10 - Disaster Recovery Answer Key Part 3

: Module 10 - Disaster Recovery 51. Disaster response, like incident response, usually begins with a(n) _____. trigger ANSWER: 52. In CP, the point at which a management decision to act is made in reaction to data or a notification of an incident or disaster is known as a(n) _____. trigger ANSWER: 53. The DR plan should be a dynamic document that is updated regularly to remain current with _____ enhancements. ANSWER: system : Module 10 - Disaster Recovery 54. A process known as _____ management is an organization’s set of planning and preparation efforts for dealing with potential human injury, emotional trauma, loss of life, or damage to an organization’s reputation or image as a result of a disaster. ANSWER: crisis 55. Most organizations don't tend to train employees to operate under adverse conditions, also known as _____. ANSWER: degraded mode 56. External testing can come from standardization boards or _____ (for example, ISO 9000), certification or accreditation groups, or a group selected by the organization’s management from a sister company. ANSWER: consultants : Module 10 - Disaster Recovery 57. Internal testing can include employees conducting _____ after an exercise by completing feedback surveys to indicate what they thought worked well and what did not. ANSWER: self-assessments 58. A scripted description of the disaster that avoids impeding the notification process by consisting of just enough information so that each responder knows what portion of the DR plan to implement is known as the _____. ANSWER: alert message 59. A(n) _____ system is an information system with telephony, messaging, and e-mail integration that can be used to automate the alert notification process. ANSWER: emergency notification : Module 10 - Disaster Recovery 60. The _____ phase of a disaster recovery plan involves activating the plan and following the outlined steps. ANSWER: response 61. The disaster _____ phase of the disaster response plan is associated with the return to normal business operations, beginning with those most critical to the organization. ANSWER: resumption 62. Perhaps the last formal activity the organization performs before declaring the disaster officially over is the _____. ANSWER: after-action review : Module 10 - Disaster Recovery 63. Many organizations combine the disaster recovery and business continuity plans into a single comprehensive document called the contingency plan or _____ plan. business resumption ANSWER: 64. The _____ phase of the disaster response plan is associated with the salvage of equipment and data from the affected sites. ANSWER: disaster recovery : Module 10 - Disaster Recovery Matching Match each item with a statement below. a. Storage recovery team b. Applications recovery team c. Computer recovery (hardware) team d. Alert roster e. Sequential roster f. Recovery phase g. Communications team h. Restoration phase i. Hierarchical roster 65. Works to recover any physical computing assets that might be usable after the disaster ANSWER: c 66. Focuses on critical business operations ANSWER: f 67. Needs training in recovering data from off-site locations, along with the data management team ANSWER: a 68. Commonly tested at least quarterly ANSWER: d 69. During this phase, an organization might have to select a new permanent home ANSWER: h 70. Has representatives from the public relations and legal departments ANSWER: g : Module 10 - Disaster Recovery 71. Responsible for recovering and reestablishing the operations of critical business programs ANSWER: b 72. Requires that the first person call other designated people on the roster ANSWER: i 73. Requires that a contact person call each person on the roster ANSWER: e Match each item with a statement below. a. Disaster management team b. Business interface team c. Communications team d. Network recovery team e. Computer recovery team f. Data management team g. Vendor contact team h. Logistics team i. Business interface team 74. Works with the remainder of the organization to assist in the recovery of non-technical functions ANSWER: b 75. Works to reestablish functions by repairing or replacing damaged or destroyed communication components ANSWER: d 76. Expected to quickly assess the recoverability of data from systems on site and then make recommendations to the management team as to whether off-site data recovery is needed ANSWER: f 77. Can work from preauthorized purchase orders to quickly order replacement equipment, applications, and services as the individual teams work to restore recoverable systems : Module 10 - Disaster Recovery ANSWER: g 78. Interfaces with upper management, law enforcement, and the press ANSWER: c 79. Consists of the individuals responsible for providing any needed supplies, space, materials, food, services, or facilities at the primary site ANSWER: h 80. Provides initial assessments of damage to equipment ANSWER: i 81. Works to recover physical computing assets that might be usable ANSWER: e 82. Coordinates all disaster recovery efforts ANSWER: a Subjective Short Answer 83. Why is it important that members of the disaster recovery team do not serve with the IR team or the BC team? The membership of the DR team should be distinctly separate from that of any ANSWER: other contingency-related team, as each team has differing responsibilities when activated in a real disaster, and it is very possible that more than one team will be active at the same time. Therefore, it is important that DR team members do not serve with either the IR team or the business continuity (BC) team, as the duties of each team may overlap if an incident escalates into a disaster that requires the implementation of the BC plan. Module 10 - Disaster Recovery 84. What is the purpose of the disaster management team? This is the command and control group responsible for all planning and ANSWER: coordination activities. This team must be able to quickly and effectively communicate the need for resources that are required for their subordinate teams. It must also be able to communicate directives from the higher teams (the CP management team) and peer teams (the IR and BC planning teams). 85. Describe the functions of the business interface and logistics teams in DR. The business interface team is responsible for working with the remainder of the ANSWER: organization to assist in the recovery of non technical functions.The logistics team is responsible for providing any needed supplies, space, materials, food, services, or facilities at the primary site. : Module 10 - Disaster Recovery 86. Members of a DR team cannot predict when they will receive an emergency call and be required to activate the disaster recovery plan. What precautions can they take to ensure that they can access necessary information and materials? All members of the DR team should have multiple copies of the DR and BC ANSWER: plans in their homes, vehicles, and offices, as they cannot predict when they will receive an emergency call and be required to activate the plans. It is also important for the responsible team members to have access to certain DR materials, should the need arise. The equipment that team members need differs based on their roles and responsibilities. 87. Give three examples of equipment that a member of a DR team might need during the course of a disaster recovery. ANSWER: The equipment that team members need differ based on their roles and responsibilities. Possible examples include the following: Data recovery software to recover data from damaged systems Redundant hardware and components to rebuild damaged systems Copies of building blueprints to direct recovery efforts Key phone numbers Insurance contacts Emergency supplies