Understand the Processes and Controls Involved in Technology Infrastructure Resilience. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When planning technology infrastructure resilience measures, why is it important to consider business impact?

   • ATo eliminate the need for any incident response procedures
   • BTo satisfy regulatory requirements that all data be stored in the same geographic region
   • CTo ensure that all systems receive exactly the same level of resilience regardless of their importance
   • DTo prioritize resilience investments for systems whose disruption would cause the greatest harm to the organization
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A financial services firm operates a trading platform that requires extremely low latency. The platform is currently hosted in a single data center. The firm wants to improve resilience without significantly increasing latency. Which approach best balances resilience and performance?

   • ADeploy an active-active configuration across two data centers in the same metropolitan area.
   • BReplicate the platform to a data center on another continent.
   • CUse a single data center but with redundant power and cooling.
   • DImplement a manual failover to a cold standby site.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A logistics company's package tracking system is critical for customer satisfaction. The system is currently hosted on a single server with nightly backups. The company is considering moving to a cloud provider that offers a 99.9% availability SLA. The IT director is concerned about the cost of a high-availability design. What is the MOST cost-effective approach that still improves resilience?

   • AMove to a multi-region active-active deployment with global load balancing.
   • BKeep the system on the single server but increase the frequency of backups to hourly.
   • CUse a single virtual machine with a larger size to handle more load.
   • DDeploy the system on two virtual machines in different availability zones with a load balancer.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Within the NIST Cybersecurity Framework 2.0 PROTECT function, what is the primary purpose of technology infrastructure resilience?

   • ATo monitor network traffic for signs of malicious activity
   • BTo eliminate all cybersecurity threats before they can affect the infrastructure
   • CTo ensure that IT systems can continue operating and recover quickly when disruptions occur
   • DTo assign roles and responsibilities to personnel during an incident
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A financial trading firm has a high-availability system with automatic failover. The system has a recovery time objective (RTO) of 5 minutes. The firm conducts a failover test every quarter. During the last test, the failover took 7 minutes. What is the MOST appropriate action?

   • AInvestigate the cause of the delay and adjust the failover configuration or procedures.
   • BAccept the 7-minute failover time as within an acceptable margin of error.
   • CStop conducting failover tests to avoid revealing performance issues.
   • DIncrease the RTO to 10 minutes to match the observed failover time.
   Reveal Solution Discussion Select an answer first