Backup & Disaster Recovery Flashcards
7 cards from real CSA practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Backup & Disaster Recovery flashcards as text
What is 'air-gapping' in the context of backup security?
Answer: Physically or logically isolating backup media from the network to protect against cyberattacks
Air-gapping isolates backup copies from network-connected systems so ransomware or hackers cannot reach and encrypt or delete the backups.
A company's RTO is 4 hours and its RPO is 1 hour. What does this mean operationally?
Answer: Systems must be restored within 4 hours and backups must run at least every hour
RTO of 4 hours means downtime cannot exceed 4 hours; RPO of 1 hour means data loss cannot exceed 1 hour, requiring backups at least every 60 minutes.
What distinguishes a 'failover' from a 'failback' in disaster recovery?
Answer: Failover moves operations to the DR site; failback restores them to the original primary site
Failover shifts workloads to the backup/DR environment when the primary fails; failback is the planned process of returning those workloads to the restored primary site.
Which encryption standard is commonly recommended for protecting backup data at rest?
Answer: AES-256
AES-256 (Advanced Encryption Standard with 256-bit keys) is the industry standard for encrypting backup data at rest, providing strong protection against unauthorized access.
What is the main reason organizations perform periodic DR drills or full failover tests?
Answer: To validate that recovery procedures work as documented and that staff can execute them under pressure
Regular DR tests reveal gaps in procedures, configuration drift, or staff knowledge deficiencies before an actual disaster exposes them at the worst possible time.
What is 'data replication' and how does it differ from backup?
Answer: Replication continuously mirrors live data to another location; backup creates point-in-time copies for historical recovery
Replication keeps a live, synchronized copy of data for high availability, while backup preserves point-in-time snapshots that allow recovery from data corruption or deletion.
Which regulation most directly drives backup and data retention requirements for US healthcare organizations?
Answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) requires US healthcare organizations to implement data backup plans and retain certain records to protect patient health information.