Understand the Processes and Controls Involved in Technology Infrastructure Resilience. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a key control that supports technology infrastructure resilience by providing a duplicate component that can take over if the primary fails?

   • AEncryption
   • BRedundancy
   • CPatch management
   • DLogging
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A hospital's electronic health record (EHR) system is critical for patient care. The IT team is planning resilience measures. They have a limited budget and must prioritize investments. Which approach best aligns with the NIST PROTECT function's guidance on resilience planning?

   • AFocus redundancy and failover on the EHR system, as it has the highest business impact.
   • BDefer resilience planning until after a major incident occurs to better understand the risks.
   • CPurchase the most expensive high-availability solution for every server to ensure no downtime.
   • DImplement redundant components for all systems to ensure maximum availability.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A cloud service provider offers a service level agreement (SLA) of 99.99% availability. The provider's operations team wants to verify that their resilience controls are effective. Which monitoring approach would provide the most direct evidence of meeting the SLA?

   • AReview the configuration of the load balancers on a monthly basis.
   • BMonitor the number of security incidents reported by customers.
   • CConduct an annual penetration test of the infrastructure.
   • DTrack the percentage of time the service is available over a defined period.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A software company's development environment is hosted on a single server. The team wants to ensure that the environment can be quickly restored if the server fails. What is the MOST effective way to test the recovery capability?

   • AMonitor the server's resource usage to predict potential failures.
   • BRestore the server from a backup in a test environment and verify the applications work.
   • CEnsure the server is covered by a maintenance contract.
   • DReview the backup logs to ensure backups are being created successfully.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital's electronic medical record (EMR) system is down due to a storage array failure. The system is replicated to a secondary site, but the failover is manual. The IT team has a documented runbook for this scenario. What is the FIRST step the team should take according to the runbook?

   • AWait for the storage vendor to arrive before taking any action.
   • BActivate the incident response plan and notify key stakeholders.
   • CShut down the EMR system to prevent data corruption.
   • DImmediately fail over to the secondary site without notifying anyone.
   Reveal Solution Discussion Select an answer first