Understand the Processes and Controls Involved in Technology Infrastructure Resilience. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of monitoring technology infrastructure resilience?

   • AConducting a one-time review of system configurations
   • BContinuously checking the health and availability of critical systems and their redundant components
   • CUpdating antivirus signatures on all endpoints
   • DDesigning a new network topology for future expansion
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A healthcare organization's patient monitoring system is critical and has a recovery time objective (RTO) of 15 minutes. The system is backed up to a remote site, but the restoration process takes 2 hours. The organization is considering a pilot test of the recovery procedure. What is the MOST important factor to evaluate during the test?

   • AThe cost of the backup storage at the remote site.
   • BWhether the restored system can be brought online within the 15-minute RTO.
   • CThe number of personnel required to perform the restoration.
   • DThe security of the backup data during transmission.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A hospital's patient portal experiences a ransomware attack that encrypts the application servers. The backup system is intact, but the recovery process is estimated to take 8 hours. The hospital's RTO for the portal is 4 hours. What is the BEST course of action to meet the RTO?

   • AActivate a disaster recovery site with a more recent copy of the application and data.
   • BRestore the backups as quickly as possible and accept the 8-hour downtime.
   • CDeclare a disaster and invoke the business continuity plan to use manual processes.
   • DPay the ransom to get the decryption key and restore the systems.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A manufacturing company's production scheduling system is hosted on a single server. The plant manager is concerned about a potential power outage in the server room. The IT team is evaluating resilience options. Which measure would MOST directly address the risk of a power outage?

   • AInstall an uninterruptible power supply (UPS) and a backup generator.
   • BEnable the server's built-in firewall.
   • CIncrease the server's RAM and CPU capacity.
   • DImplement a backup tape rotation schedule.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a key input when planning and implementing technology infrastructure resilience measures?

   • AA risk assessment that identifies threats and vulnerabilities to critical infrastructure
   • BThe organization's marketing budget
   • CThe number of employees in the organization
   • DThe color scheme of the corporate website
   Reveal Solution Discussion Select an answer first