Resilience and Recovery Planning NETWORKING-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A financial services firm is designing a resilience strategy and must protect against ransomware that could encrypt both production and traditional backup copies. The security team insists on an air-gapped copy of critical data that can be recovered without relying on the production network. Which solution directly addresses this requirement?

   • AEnable storage snapshots on the production array with a 30-day retention
   • BDeploy a Cyber Recovery Vault with an isolated, policy-controlled recovery environment
   • CIncrease the frequency of existing backup jobs to every 15 minutes
   • DConfigure replication to a second site on the same Active Directory domain
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is considering whether to invest in a Cyber Recovery Vault. Their current backup strategy uses a cloud-based backup service that retains 30 days of history. The company's main concern is a ransomware attack that could encrypt both production and the cloud backup. What is the primary advantage of the vault over the existing cloud backup?

   • AThe vault provides faster recovery than the cloud backup service
   • BThe vault stores data in a different format that is immune to encryption
   • CThe vault automatically detects and blocks ransomware in production
   • DThe vault provides an isolated copy that is not accessible from the production network
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is developing a comprehensive resilience plan. The plan includes a Cyber Recovery Vault, but the budget is limited. The company must decide which data to include in the vault. The company has three candidate data sets: (1) the customer relationship management (CRM) database, (2) the email archive, and (3) the source code repository. The company's primary business risk is losing customer data and the ability to operate its sales pipeline. Which data set should be prioritized for the vault?

   • AAll three data sets, because they are all critical to the business
   • BThe email archive, because it contains historical communications that may be needed for compliance
   • CThe CRM database, because it directly supports the sales pipeline and contains critical customer data
   • DThe source code repository, because it is unique and cannot be recreated
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company is integrating a Cyber Recovery Vault into its broader disaster recovery plan. The plan already includes traditional backups and offsite replication. The company wants the vault to serve as the final line of defense against ransomware. What is the most appropriate role for the vault in this strategy?

   • AA monitoring tool that detects ransomware in the production environment
   • BA last-resort, isolated copy of critical data used when primary and secondary backups are compromised
   • CThe primary backup target for all daily backups
   • DA replacement for the existing offsite replication site
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is deploying a Cyber Recovery Vault. The security team requires that the vault's data be protected from both external attackers and insider threats, including administrators with elevated privileges. Which combination of features is most effective for this requirement?

   • AEncryption at rest and a strong password policy
   • BA single administrator account with full access to the vault
   • CNetwork segmentation and a firewall rule that blocks all inbound traffic
   • DImmutable snapshots, multi-factor authentication, and separation of duties
   Reveal Solution Discussion Select an answer first