Читаем CISSP Practice полностью

87. c. The main hazards caused by hurricanes most often involve the loss of power, flooding, and the inability to access facilities. Businesses may also be impacted by structural damage as well. Hurricanes are the only events that give advanced warnings before the disaster strikes. Excessive rains lead to floods. Earthquakes do not give advanced warnings. Tornado warnings exist but provide little advance warning, and they are often inaccurate.

88. The most effective action to be taken when a hurricane advance warning is provided is to:

a. Declare the disaster early.

b. Install an uninterruptible power supply system.

c. Provide a backup water source.

d. Acquire gasoline-powered pumps.

88. a. The first thing is to declare the disaster as soon as the warning sign is known. Protecting the business site is instrumental in continuing or restoring operations in the event of a hurricane. Ways to do this include an uninterruptible power supply (batteries and generators), a backup water source, and a supply of gasoline-powered pumps to keep the lower levels of the facility clear of floodwaters. Boarding up windows and doors is good to protect buildings from high-speed flying debris and to prevent looting.

89. Which of the following requires advance planning to handle a real flood-driven disaster?

a. Call tree list, power requirements, and air-conditioning requirements

b. Power requirements and air-conditioning requirements

c. Air-conditioning requirements and media communications

d. Call tree list and media communications

89. b. Power and air-conditioning requirements need to be determined in advance to reduce the installation time frames. This includes diesel power generators, fuel, and other associated equipment. Media communications include keeping in touch with radio, television, and newspaper firms. The call tree list should be kept current all the time so that the employee and vendor-notification process can begin as soon as the disaster strikes. This list includes primary and secondary employee names and phone numbers as well as escalation levels.

90. Which of the following is of least concern in a local-area network contingency plan?

a. Application systems are scheduled for recovery based on their priorities.

b. Application systems are scheduled for recovery based on the urgency of the information.

c. Application systems are scheduled for recovery based on a period of downtime acceptable to the application users.

d. Application systems are scheduled for recovery based on a period of downtime tolerable to the application programmers.

90. d. An alternative location is needed to ensure that critical applications can continue to be processed when the local-area network (LAN) is unavailable for an extended period of time. Application systems should be scheduled for recovery and operation at the alternative site, based on their priority, the urgency of the information, and the period of downtime considered acceptable by the application users. It does not matter what the application programmers consider acceptable because they are not the direct users of the system.

91. After a disaster, at what stage should application systems be recovered?

a. To the last online transaction completed

b. To the last batch processing prior to interruption

c. To the actual point of interruption

d. To the last master file update prior to interruption

91. c. The goal is to capture all data points necessary to restart a system without loss of any data in the work-in-progress status. The recovery team should recover all application systems to the actual point of the interruption. The other three choices are incorrect because there could be a delay in processing or posting data into master files or databases depending on their schedules.

92. Which of the following may not reduce the recovery time after a disaster strikes?

a. Writing recovery scripts

b. Performing rigorous testing

c. Refining the recovery plans

d. Documenting the recovery plans