A company's headquarters is destroyed by a fire. The IT team activates the plan to restore operations at an alternate site. The database team restores the last full backup plus transaction logs, bringing the database to a consistent state as of 20 minutes before the fire. Which statement best describes what has occurred?

Data recovery restored the database to a specific point in time, and disaster recovery restored business operations at the alternate site.

Both data recovery and disaster recovery were completed because the database is restored and the site is operational.

Neither data recovery nor disaster recovery occurred because the database lost 20 minutes of transactions.

Disaster recovery restored the database, and data recovery relocated the business to the alternate site.

A media company stores large video files that are rarely modified after creation. The company's RPO for this data is 24 hours and the RTO is 12 hours. The current backup strategy is a nightly full backup. The storage team proposes switching to a weekly full backup plus daily incremental backups to reduce storage costs. What is the primary trade-off of this change?

The RPO will increase to 7 days because the full backup is only weekly

Recovery time will increase because multiple incremental backups must be restored sequentially

The RTO will decrease because incremental backups are faster to create

Storage costs will increase because incremental backups are larger than full backups

A company runs a customer portal that must be available 24/7. The database has an RPO of 5 minutes and an RTO of 1 hour. The current backup strategy is a nightly full backup and transaction-log backups every 5 minutes. Restoring from the full backup and applying logs takes about 90 minutes. The team is considering implementing a standby replica with asynchronous replication. What is the main trade-off of this approach?

The RPO may not be met because asynchronous replication can lag behind the primary

The RPO will improve to zero because replication is continuous

The RTO will increase because the standby replica must be synchronized before failover

Storage costs will decrease because replication uses less storage than backups

A company experiences a regional power outage that affects its primary data center. The IT team activates the disaster recovery plan and fails over to a secondary site. The database is restored from the last backup, which is 30 minutes old. Which statement correctly distinguishes data recovery and disaster recovery in this scenario?

Neither occurred because the database lost 30 minutes of data.

Data recovery is the failover to the secondary site, and disaster recovery is the restoration of the database.

Disaster recovery is the failover to the secondary site, and data recovery is the restoration of the database from backup.

Both are the same because the database is restored at the secondary site.

What is the first step in executing a data recovery procedure?

Identify the scope of data loss and the recovery objectives

Notify all employees of the incident

Delete the corrupted data to make room for new data

Restore the most recent backup immediately

GIAC Critical Controls Certification

Domain 4Objective 2

Data Recovery GCCC Practice Questions (Page 7)

Part of the Data Protection and Recovery domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

6concepts

Questions 31–35

31application · medium
A company's headquarters is destroyed by a fire. The IT team activates the plan to restore operations at an alternate site. The database team restores the last full backup plus transaction logs, bringing the database to a consistent state as of 20 minutes before the fire. Which statement best describes what has occurred?
Select an answer first
32expert · hard
A media company stores large video files that are rarely modified after creation. The company's RPO for this data is 24 hours and the RTO is 12 hours. The current backup strategy is a nightly full backup. The storage team proposes switching to a weekly full backup plus daily incremental backups to reduce storage costs. What is the primary trade-off of this change?
Select an answer first
33expert · hard
A company runs a customer portal that must be available 24/7. The database has an RPO of 5 minutes and an RTO of 1 hour. The current backup strategy is a nightly full backup and transaction-log backups every 5 minutes. Restoring from the full backup and applying logs takes about 90 minutes. The team is considering implementing a standby replica with asynchronous replication. What is the main trade-off of this approach?
Select an answer first
34application · medium
A company experiences a regional power outage that affects its primary data center. The IT team activates the disaster recovery plan and fails over to a secondary site. The database is restored from the last backup, which is 30 minutes old. Which statement correctly distinguishes data recovery and disaster recovery in this scenario?
Select an answer first
35foundation · easy
What is the first step in executing a data recovery procedure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Data Recovery GCCC Practice Questions (Page 7)

Questions 31–35

What is the first step in executing a data recovery procedure?

Keep studying — Data Protection and Recovery