Security+ Domain 6 - Organizational Security

Front 1

What is a Cold Site?

Back 1

A DR site that is not immediately ready for use. Provides the place but not the infrastructure

Front 2

What is a Warm Site?

Back 2

A DR site that requires customers to do more work to get them operational
Aka "active/active model"

Front 3

What is a Hot Site

Back 3

A DR site that can be operable in hours of failure
Aka "active backup model"

Front 4

What is Redundancy?

Back 4

Either duplicated or fail over
Fail over refers to process of reconstructing a system or switching over to other systems
Clustering - many newer OS cluster to provide fail over. Involves multiple systems connected together. If the system fails, other systems take up the slack
May cluster around single disk

Front 5

What is Fault Tolerence?

Back 5

Sustain operations in event of a component failure.
Can continue operations even if critical component has failed because of "over engineering" or redundant components and subsystems
Spare parts should always be readily available N+1
Need fault tolerance in your electrical infrastructure as well
Like UPS, backup

Front 6

What is RAID level 0?

Back 6

Disk striping, multiple drives mapped together as a single drive. For performance not fault tolerance

Front 7

What is RAID level 1?

Back 7

Disk mirroring. Provides 100% redundancy because everything is stored on 2 disks.
With mirroring, one controller card writhes sequentially to each drive
With duplexing, same data written to both cards simultaneously

Front 8

What is RAID level 3?

Back 8

Disk striping with a parity disk
Parity information is a value based on the value of the data stored in each location.
Uses the arithmetic value of the data binary. Drive can be replaced and rebuilt using the parity information.

Front 9

What is RAID level 5?

Back 9

Disk striping with parity
Parity spread across disks in the array instead of on a single disk

Front 10

What is an Incremental Backup?

Back 10

Only info that has changed gets backed up.

Front 11

What is a Differential Backup?

Back 11

Backups up any files that have been altered sine the last full backup even if they were backed up at last incremental backup

Front 12

What is High Availability?

Back 12

Assurance of sufficient bandwidth and timely access to resources. System will be online, active and responding to requests in a timely mannor.

Front 13

What is Fault Tolerance?

Back 13

Ability of system to with stand a certain level of failures, faults or problems and continue to provide reliable service. Server clustering provides fault tolerance.

Front 14

What are the elements of Business Continuity Plan?

Back 14

Risk Analysis and Assessment
Business Impact Analysis
Stragegic Planning for Mitigation of Risks
Integration and Validation of the Plan
Training and Awareness
Maintenance and Auditing of Plan.

Front 15

What is Due Care?

Back 15

The display of proper security attention in an organization. By designing and implementing security policy, business shows due care

Front 16

What is Due Dilligence?

Back 16

Continuation of due care process. Dilligent in maintaining the policy created under due care.

Front 17

What is Due Process?

Back 17

Government must respect legal rights of individuals.

Front 18

What do you consider with Disaster Recovery?

Back 18

Bring sites back immmediately.
Backup and data restoration
Redundancey
SLAs
DR plans.

Front 19

What is Slack Space?

Back 19

Unused space in disk cluster

Front 20

What is Structured Walk Through Test?

Back 20

Review of the plan to ensure all steps are included

Front 21

What is Simulation Test?

Back 21

Practice run of the DR plan

Front 22

What is Parallel Test?

Back 22

Tests specific systems to ensure their operation at alternate facilities

Front 23

What is Full Interruption Test?

Back 23

Includes shutting down the original site and making alternate site operational