Understand the Processes and Controls Involved in Technology Infrastructure Resilience. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A regional bank's core banking application runs on a single active server in its primary data center. The bank's business impact analysis shows the application can tolerate at most 30 minutes of downtime. The IT manager proposes adding a standby server in a secondary data center with synchronous data replication. What is the PRIMARY resilience benefit of this configuration?

   • AIt eliminates the need for a disaster recovery plan because the standby server is always ready.
   • BIt provides automatic failover to the standby server within the recovery time objective.
   • CIt guarantees no data loss in any failure scenario, including a regional disaster.
   • DIt reduces the recovery point objective to zero by using synchronous replication.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has implemented a redundant network architecture with automatic failover between two internet service providers. The network team wants to ensure the failover actually works as expected. Which activity is MOST effective for validating this resilience control?

   • AMonitor network performance metrics to ensure the primary link is not saturated.
   • BReview the configuration of the routers and switches on a quarterly basis.
   • CConduct a tabletop exercise where the team discusses how they would respond to an ISP outage.
   • DSimulate an ISP outage by disconnecting the primary link and observing whether traffic automatically shifts to the backup.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the context of technology infrastructure resilience, what is the primary purpose of a failover mechanism?

   • ATo record all user actions for audit purposes
   • BTo permanently replace the primary system with a newer model
   • CTo encrypt data before it is transmitted over the network
   • DTo automatically switch operations to a standby system when the primary system fails
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement best describes the role of technology infrastructure resilience within the NIST Cybersecurity Framework 2.0?

   • AIt is a method for detecting and analyzing security incidents in real time
   • BIt is a process for identifying and categorizing all organizational assets
   • CIt is a set of capabilities that help the organization maintain essential functions during adverse conditions
   • DIt is a legal requirement that mandates specific backup schedules for all data
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of regularly testing technology infrastructure resilience measures?

   • ATo replace the need for incident response planning
   • BTo verify that the measures work as intended and that the organization is ready to respond to disruptions
   • CTo guarantee that no disruption will ever occur
   • DTo increase the cost of IT operations
   Reveal Solution Discussion Select an answer first