Restoring IT systems after a disaster

Goal during containment phase?

Stop the incident from spreading

Why is incident docs important?

For lessons learned & future prevention

Why is DRP testing crucial?

To identify plan gaps & ensure readiness

studbud

Incident Response Essentials

13 termsStudBud Administration17 plays

Test your knowledge on key concepts of incident response plans and strategies to handle cybersecurity incidents effectively.

Flashcards13 cardsFPractice quizPHost liveL

Questions 13

Answers

1
Main focus of a DRP?
Managing daily IT operations
Preventing all types of disasters
Restoring IT systems after a disaster
Maintaining business operations during disruption
2
Goal during containment phase?
Identify the root cause
Identify the root cause
Stop the incident from spreading
Analyze incident data
3
DR site: minimal setup?
Warm Site
Hot Site
Cold Site
Active Site
4
DRP is subset of what plan?
BCP (Business Continuity Plan)
OLA (Operational Level Agreement)
SLA (Service Level Agreement)
IRP (Incident Response Plan)
5
Common network incident type?
Paper cut
Malware (e.g., ransomware)
Coffee spill
Printer jam
6
Metric for time to restore ops?
RPO (Recovery Point Objective)
RTO (Recovery Time Objective)
MTTR (Mean Time To Recover)
MTBF (Mean Time Between Failures)
7
99.999% availability is how much downtime/year?
Approx. 8 hours
Approx. 52 minutes
Approx. 3.6 days
Approx. 5.26 minutes
8
First phase of incident response?
Recovery
Identification
Preparation
Containment
9
Why is incident docs important?
Only for legal purposes
For lessons learned & future prevention
To avoid reporting the incident
To blame individuals
10
Key purpose of Incident Response Plan?
Guarantee no future incidents
Minimize incident impact
Automate all network tasks
Eliminate all security risks
11
DR site: fully equipped, mirrored?
Hot Site
Warm Site
Cold Site
Standby Site
12
Why is DRP testing crucial?
To increase network speed
To reduce testing costs
To identify plan gaps & ensure readiness
To guarantee disaster prevention
13
Metric measuring how often a resource is operational and accessible?
Packet loss rate
Bandwidth
Uptime percentage
Jitter

Incident Response Essentials Flashcards | StudBud