Pass the ECCouncil EDRP 312-76 Questions and answers with ExamsMirror

Business Impact Analysis (BIA) is a process to identify critical business functions and assess the impact of disruptions. Its components typically include executive sponsorship (to ensure leadership support), formation of a committee (to conduct the analysis), and feedback (to refine the process). Safety, while important in disaster recovery, is not a direct component of BIA, which focuses on operational and financial impacts rather than physical safety measures.

Option A (Feedback):Essential for validating and improving BIA findings.

Option B (Executive Sponsorship):Critical for resource allocation and authority.

Option D (Formation of Committee):Necessary for collaboration and execution.

EDRP v3 outlines BIA components, excluding safety as a core element, focusing instead on impact assessment and resource prioritization (Module: Business Impact Analysis).

PASIS (Pittsburgh Advanced Survivable Information Storage) architecture balances availability, durability, and confidentiality. Increasing availability (easier data access) often reduces confidentiality (data protection) due to trade-offs in access control and encryption strength.

Option A (Nonrepudiation):Unrelated to availability trade-offs.

Option B (Durability):Remains high in PASIS, not decreased.

Option D (Latency):May decrease with higher availability, not increase.

EDRP v3 discusses PASIS trade-offs, noting confidentiality decreases as availability rises to ensure survivability (Module: Survivable Storage Systems).

An Emergency Operations Center (EOC) is a centralized facility that coordinates disaster response, recovery actions, and resource allocation, ensuring operational coherence during a crisis.

Option A (Crisis Command Center):Similar but less formal/standardized than an EOC.

Option B (Colocation Facilities):Physical data centers, not command hubs.

Option C (Mobile Recovery Center):A portable recovery site, not a coordination center.

“The Emergency Operations Center (EOC) serves as the nerve center for disaster management, orchestrating recovery efforts and resource deployment” (Module: Disaster Recovery Planning, Section: Command and Control).

An Exchange Server (Microsoft) provides mail and calendar services, managing email, scheduling, and collaboration.

Option A (Application Server):Runs applications, not mail-specific.

Option B (Web Server):Hosts websites, not mail/calendar.

Option D (Domain Controller):Manages network authentication, not mail.

“Exchange Servers deliver email and calendar services, critical for communication continuity in organizations” (Module: Server Management, Section: Server Roles).

ISO 22301 is the standard for societal security in Business Continuity Management Systems (BCMS), ensuring resilience against disasters, as Jess desires.

Option A (ISO 27031):ICT continuity, not societal focus.

Option C (NFPA 1600):Disaster management, broader than BCMS.

Option D (ISO 27005):Risk management, not continuity-specific.

“ISO 22301, the societal security standard for BCMS, ensures robust continuity planning for disaster resilience” (Module: Business Continuity Management, Section: Standards).

Network Attached Storage (NAS) is a centralized storage solution connected to a network, allowing multiple users and devices to access and back up data efficiently. It’s ideal for Tom’s needs across multiple branches, offering centralized storage and simplified backup/recovery processes.

Option A (DAS):Direct Attached Storage is local to a single server, not centralized across a network.

Option C (PAS):This appears to be a typo; no such standard technology exists (possibly meant SAN or similar).

Option D (RAID):Redundant Array of Independent Disks enhances reliability but isn’t a centralized network solution.

EDRP v3 discusses NAS as a scalable, centralized storage option for backup and recovery in distributed environments (Module: Storage Technologies).

A Cold Backup is performed when the database is offline, ensuring data consistency by avoiding changes during the process, as described.

Option A (Online Data Backup):Implies active system backup, not offline.

Option B (Hot Backup):Taken while the system is online.

Option C (Full System Backup):Broad term, not offline-specific.

“Cold Backup occurs with the database offline, ensuring a consistent snapshot without transaction interference” (Module: Data Backup and Recovery, Section: Backup Types).

A vulnerability assessment follows a logical sequence:

d) List the threats that may occur– Identify potential threats first.

b) Estimate the probability of occurrence of each threat– Assess likelihood next.

a) Assess the potential impact of the threat on the organization– Evaluate impact after probability.

c) Assess the internal and external resources available to mitigate the identified threats– Finally, review mitigation resources.This order (d, b, a, c) ensures threats are identified before analyzing their likelihood, impact, and mitigation, aligning with standard risk assessment practices.

Option A (c, a, d, b):Starts with resources, illogical without threats.

Option C (b, d, c, a):Probability before listing threats is premature.

Option D (b, c, d, a):Probability and resources before threats is out of sequence.

“Vulnerability assessment begins with listing threats, followed by estimating probability, assessing impact, and evaluating mitigation resources in that order (d, b, a, c)” (Module: Risk Management, Section: Vulnerability Assessment Steps).

The Review Phase of scenario training occurs after execution and involves a debrief with participants to gather feedback, assess performance, and identify improvements. This aligns with the question’s focus on obtaining feedback post-training.

Option A (Execution Phase):The active running of the scenario, no debrief yet.

Option C (Warning Phase):Not a standard phase; implies pre-event alerts.

Option D (Planning Phase):Prepares the scenario, not for feedback collection.

“The Review Phase follows scenario execution, involving a debrief to collect participant feedback and refine the training process” (Module: Training and Awareness, Section: Training Phases).

Full Interruption Testing involves shutting down primary systems to test recovery processes, making it expensive (due to downtime costs) and disruptive to normal operations.

Option B (Simulation Testing):Mimics a disaster without stopping operations.

Option C (Parallel Testing):Runs recovery systems alongside primary ones, non-disruptive.

Option D (Checklist Testing):A review process, no operational impact.

“Full Interruption Testing, while thorough, incurs high costs and disrupts business by halting primary systems to validate recovery” (Module: Testing Disaster Recovery Plans, Section: Test Types).