Emergency Preparedness & Safety Flashcards
7 cards from real CSA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Emergency Preparedness & Safety flashcards as text
Which phase of the NIST incident response lifecycle focuses on stopping an attacker from spreading further within the network?
Answer: Containment, Eradication, and Recovery
The Containment, Eradication, and Recovery phase includes isolating affected systems to prevent further spread, removing threats, and restoring operations.
An organization's BCP requires that the IT team maintain contact with vendors during a disaster. Which document BEST formalizes vendor obligations during such events?
Answer: Service Level Agreement (SLA) with disaster response provisions
An SLA with explicit disaster response provisions legally binds the vendor to defined response times and support levels during declared emergencies.
What is the recommended action when an organization discovers that its BCP has not been updated in three years and a major infrastructure migration has occurred?
Answer: Conduct a full BCP review and update it to reflect current infrastructure, contacts, and dependencies
BCPs must reflect current infrastructure; a major migration changes dependencies, recovery paths, and contact information, making a full review mandatory.
An employee witnesses a coworker collapse in the server room. No AED is available on that floor. What is the CORRECT immediate action sequence?
Answer: Call 911 immediately, begin CPR if trained, and send someone to retrieve the nearest AED
The correct sequence is to call 911 immediately, begin hands-only CPR if trained, and dispatch someone to locate the nearest AED to maximize survival odds.
Which of the following backup types captures ONLY the data that has changed since the last FULL backup, regardless of whether subsequent incrementals have run?
Answer: Differential backup
A differential backup copies all data changed since the last full backup, meaning each differential grows larger until the next full backup runs.
A tornado warning is issued while 50 employees are working in an open-plan office adjacent to the data center. What is the CORRECT immediate action?
Answer: Direct employees to the designated interior shelter area away from windows immediately
Tornado protocol requires immediate movement of people to interior shelter away from windows; employee safety takes absolute priority over equipment.
What is the primary goal of a Business Impact Analysis (BIA) in emergency preparedness?
Answer: To identify critical business functions, their dependencies, and the impact of disruption over time
A BIA identifies which business functions are critical, what systems they depend on, and quantifies the financial/operational impact of downtime to prioritize recovery efforts.