Question 1

What kind of data can be lost when a computer is turned off?

Accepted Answer

A)  Volatile
B)  Static
C)  Non-volatile
D)  Persistent A

Question 2

Explain how to best capture volatile data.

Accepted Answer

Capturing this volatile information can best be performed by capturing the entire system image, which is a snapshot of the current state of the computer that contains all current settings and data.

Question 3

In what type of server cluster can services fail over from downed servers to functional servers?

Accepted Answer

A)  symmetric network
B)  asymmetric network
C)  symmetric server
D)  Symmetric network C

Question 4

What term is used to describe a documentation of control over evidence, which is used to ensure that no unauthorized person was given the opportunity to corrupt the evidence?

Accepted Answer

A)  chain of value
B)  chain of use
C)  chain of property
D)  chain of custody

Question 5

What kind of slack is created from information stored on a hard drive, which can contain remnants of previously deleted files or data?

Accepted Answer

A)  RAM slack
B)  Edge slack
C)  Drive file slack
D)  Sector slack

Question 6

When a company needs to identify mission-critical business functions and quantify the impact a loss of such functions may have on the organization in terms of its operational and financial position, what should be performed?

Accepted Answer

A)  Business risk analysis
B)  Business alert assessment
C)  Business productivity analysis
D)  Business impact analysis (BI
A)

Question 7

Windows stores files on a hard drive in 512-byte blocks called ____________________.

Accepted Answer

The answer of Windows stores files on a hard drive...

Question 8

A subset of business continuity planning and testing is disaster recovery, also known as IT recovery planning.

Accepted Answer

A) True 
 B)False

Question 9

Using technology to search for computer evidence of a crime in order to retrieve information, even if it has been altered or erased, that can be used in pursuit of an attacker or criminal is an example of:

Accepted Answer

A)  Computer forensics
B)  Penetration testing
C)  Vulnerability testing
D)  Risk management

Question 10

Multiple sectors on a disk, when combined, are referred to as a:

Accepted Answer

A)  cluster
B)  track
C)  slice
D)  platter

Question 11

When creating a data backup plan or policy, what five basic questions should be answered?​

Accepted Answer

The answer of When creating a data backup plan or...

Question 12

What are the steps in damage control?

Accepted Answer

The answer of What are the steps in damage control?...

Question 13

RAID 0 technology is based on ____________________.

Accepted Answer

The answer of RAID 0 technology is based on ____________________....

Question 14

Matching
-A duplicate of the production site that has all the equipment needed for an organization to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.​

Accepted Answer

A)  Business continuity
B)  Chain of custody
C)  Clustering
D)  Computer forensics
E)  Continuity of operationsF) Faraday cageG) Hot siteH) Mean time between failures (MTBF) I) Recovery point objectiveJ) Risk assessment

Question 15

Matching
-A metallic enclosure that prevents the entry or escape of an electromagnetic field.​

Accepted Answer

A)  Business continuity
B)  Chain of custody
C)  Clustering
D)  Computer forensics
E)  Continuity of operationsF) Faraday cageG) Hot siteH) Mean time between failures (MTBF) I) Recovery point objectiveJ) Risk assessment

Question 16

A location that has all the equipment installed but does not have active Internet or telecommunications facilities, and does not have current backups of data, is an example of a:

Accepted Answer

A)  cold site
B)  hot site
C)  spare site
D)  warm site

Question 17

The remaining cluster space of a partially filled sector is padded with contents from RAM. What is the name for this type of scenario?

Accepted Answer

A)  Disk slack
B)  RAM slack
C)  ROM slack
D)  Edge slack

Question 18

Duplicate image backups are considered a primary key to uncovering evidence because they create exact replicas of the crime scene.

Accepted Answer

A) True 
 B)False

Question 19

Matching
-A statistical value that is the average time until a component fails, cannot be repaired, and must be replaced.​

Accepted Answer

A)  Business continuity
B)  Chain of custody
C)  Clustering
D)  Computer forensics
E)  Continuity of operationsF) Faraday cageG) Hot siteH) Mean time between failures (MTBF) I) Recovery point objectiveJ) Risk assessment

Question 20

Matching
-Combining two or more servers to appear as one single unit.​

Accepted Answer

A)  Business continuity
B)  Chain of custody
C)  Clustering
D)  Computer forensics
E)  Continuity of operationsF) Faraday cageG) Hot siteH) Mean time between failures (MTBF) I) Recovery point objectiveJ) Risk assessment

Exam 13: Business Continuity

What kind of data can be lost when a computer is turned off?

Explain how to best capture volatile data.

In what type of server cluster can services fail over from downed servers to functional servers?

What term is used to describe a documentation of control over evidence, which is used to ensure that no unauthorized person was given the opportunity to corrupt the evidence?

What kind of slack is created from information stored on a hard drive, which can contain remnants of previously deleted files or data?

When a company needs to identify mission-critical business functions and quantify the impact a loss of such functions may have on the organization in terms of its operational and financial position, what should be performed?

Windows stores files on a hard drive in 512-byte blocks called ____________________.

A subset of business continuity planning and testing is disaster recovery, also known as IT recovery planning.

Using technology to search for computer evidence of a crime in order to retrieve information, even if it has been altered or erased, that can be used in pursuit of an attacker or criminal is an example of:

Multiple sectors on a disk, when combined, are referred to as a:

When creating a data backup plan or policy, what five basic questions should be answered?​

What are the steps in damage control?

RAID 0 technology is based on ____________________.

Matching -A duplicate of the production site that has all the equipment needed for an organization to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.​

Matching -A metallic enclosure that prevents the entry or escape of an electromagnetic field.​

A location that has all the equipment installed but does not have active Internet or telecommunications facilities, and does not have current backups of data, is an example of a:

The remaining cluster space of a partially filled sector is padded with contents from RAM. What is the name for this type of scenario?

Duplicate image backups are considered a primary key to uncovering evidence because they create exact replicas of the crime scene.

Matching -A statistical value that is the average time until a component fails, cannot be repaired, and must be replaced.​

Matching -Combining two or more servers to appear as one single unit.​

When creating a data backup plan or policy, what five basic questions should be answered?

Matching -A duplicate of the production site that has all the equipment needed for an organization to continue running, including office space and furniture, telephone jacks, computer equipment, and a live telecommunications link.

Matching -A metallic enclosure that prevents the entry or escape of an electromagnetic field.

Matching -A statistical value that is the average time until a component fails, cannot be repaired, and must be replaced.

Matching -Combining two or more servers to appear as one single unit.