CCSK Incident Response and Business Continuity in Cloud 2 — Questions and Answers
Question 1: What does CCSK say about 'recovery time objective' (RTO) in cloud business continuity planning?
- RTO is not relevant to cloud environments because recovery is automatic
- RTO defines the maximum acceptable time to restore services after an incident, which cloud architectures should be designed to meet (Correct answer)
- RTO applies only to physical data center recovery, not cloud services
- RTO is determined solely by the cloud provider's SLA
Correct answer: RTO defines the maximum acceptable time to restore services after an incident, which cloud architectures should be designed to meet
RTO defines how quickly services must be restored; cloud architectures should be designed with automation, multi-region failover, and runbooks to meet defined RTO targets.
Question 2: What is the difference between 'backup' and 'replication' in cloud disaster recovery?
- They are identical data protection mechanisms
- Backup creates point-in-time copies for restoration; replication continuously synchronizes data to another location for rapid failover (Correct answer)
- Backup is for databases only; replication is for file storage only
- Backup is more expensive than replication in cloud environments
Correct answer: Backup creates point-in-time copies for restoration; replication continuously synchronizes data to another location for rapid failover
Backups provide recoverable snapshots at a point in time, while replication maintains a live synchronized copy to minimize data loss and enable rapid failover.
Question 3: According to CCSK, what is 'chaos engineering' and how does it benefit cloud resilience?
- Deliberately introducing failures into production systems to identify weaknesses before they cause unplanned outages (Correct answer)
- A technique for randomly provisioning cloud resources to test autoscaling
- A method of encrypting cloud data using randomized keys
- A testing approach that disables all security controls to measure their impact
Correct answer: Deliberately introducing failures into production systems to identify weaknesses before they cause unplanned outages
Chaos engineering proactively tests system resilience by intentionally injecting failures (instance termination, network disruption) to identify weaknesses under controlled conditions.
Question 4: What is a 'warm standby' disaster recovery pattern in cloud environments?
- A fully idle backup environment with no running resources
- A scaled-down but running replica of the production environment that can be quickly scaled up for failover (Correct answer)
- A complete production-scale duplicate running in parallel at all times
- A backup that requires manual restoration of all data before use
Correct answer: A scaled-down but running replica of the production environment that can be quickly scaled up for failover
Warm standby maintains a minimally scaled running environment that mirrors production, enabling faster recovery than cold standby but at lower cost than hot standby.
Question 5: According to CCSK, what should organizations test to validate their cloud business continuity plans?
- Only the backup and restore capabilities
- Full failover scenarios including switching to DR environments, validating RTOs, and testing personnel procedures (Correct answer)
- Only the network connectivity between primary and DR regions
- Only the cloud provider's SLA compliance
Correct answer: Full failover scenarios including switching to DR environments, validating RTOs, and testing personnel procedures
BCP validation requires testing complete failover scenarios, verifying that RTO/RPO objectives are met, and ensuring personnel can execute procedures under real conditions.
Question 6: What is 'recovery point objective' (RPO) and how does it influence cloud backup strategy?
- RPO defines the maximum acceptable data loss (time), determining backup frequency and replication strategy (Correct answer)
- RPO defines how quickly services must be restored after an outage
- RPO is the number of recovery attempts allowed before escalating to the cloud provider
- RPO defines the geographic distance between primary and backup cloud regions
Correct answer: RPO defines the maximum acceptable data loss (time), determining backup frequency and replication strategy
RPO defines how much data loss is acceptable (e.g., 1 hour of data), directly determining whether backups need to run hourly, continuously, or use synchronous replication.
CCSK Incident Response and Business Continuity in Cloud 2
What does CCSK say about 'recovery time objective' (RTO) in cloud business continuity planning?