Configure a Cyber Vault CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company's cyber vault is accessed by multiple administrators. The security team wants to ensure that no single administrator can delete all snapshots. What is the best approach?

   • AImplement separation of duties by requiring two administrators to approve deletion.
   • BUse a shared account for all administrators.
   • CDisable snapshot locking to allow easier management.
   • DGrant all administrators full access to the vault.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What should a data recovery procedure from a cyber vault include?

   • ASteps to disable monitoring during the recovery process
   • BSteps to grant all users access to the restored data
   • CSteps to restore data to a clean, isolated environment to avoid reinfection
   • DSteps to delete the compromised data from the primary system
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A healthcare organization is setting up a cyber vault for patient records. The compliance team mandates that only authorized backup administrators can access the vault, and all access attempts must be logged for audit. Which combination of controls should be configured?

   • AUse a shared password for all administrators and disable logging to reduce overhead.
   • BImplement role-based access control (RBAC) and enable audit logging on the vault.
   • CEnable multi-factor authentication (MFA) but skip logging to simplify the process.
   • DGrant all users full access to the vault and rely on network security.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company's cyber vault has monitoring and alerting configured. During a security incident, the security team notices that alerts are delayed by 30 minutes. What is the most likely cause?

   • AThe alerting system is configured with a polling interval of 30 minutes.
   • BThe snapshot retention period is too long.
   • CThe vault is not connected to the network.
   • DThe administrators are not using multi-factor authentication.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm is configuring a cyber vault for its critical database backups. The security team requires that once a snapshot is taken, it cannot be modified or deleted by anyone, including administrators, for a retention period of 30 days. Which configuration should the administrator implement?

   • AEnable snapshot locking with a 30-day retention period on the vault volume.
   • BStore snapshots in a separate volume with restricted access.
   • CApply strict file permissions to the snapshot directory.
   • DSet the snapshot schedule to create snapshots every 30 days.
   Reveal Solution Discussion Select an answer first