CSA Emergency Preparedness & Safety 2 — Questions and Answers
Question 1: During a building evacuation drill, a system administrator discovers that a critical server room door is locked and staff cannot exit quickly. What is the FIRST priority action?
- Document the issue for the next safety meeting
- Immediately report the blocked exit to the safety officer and facilities team (Correct answer)
- Post a note on the door reminding staff to keep it unlocked
- Add the door override to the next change management ticket
Correct answer: Immediately report the blocked exit to the safety officer and facilities team
A blocked emergency exit is a life-safety hazard that must be reported immediately to safety officers and facilities so it can be corrected before a real emergency occurs.
Question 2: An organization's Incident Response Plan (IRP) should be tested at minimum how often, according to NIST SP 800-61?
- Every five years
- Annually (Correct answer)
- Only after a real incident
- Every three years
Correct answer: Annually
NIST SP 800-61 recommends testing the IRP at least annually through exercises such as tabletop drills, walk-throughs, or simulations.
Question 3: What is the primary purpose of a 'hot site' in a disaster recovery strategy?
- To archive cold backups off-site
- To provide a fully operational duplicate environment with near-zero RTO (Correct answer)
- To store hardware spares for rapid shipping
- To host a read-only mirror of production data
Correct answer: To provide a fully operational duplicate environment with near-zero RTO
A hot site is a fully equipped, immediately operational alternate facility designed to achieve near-zero recovery time objective (RTO).
Question 4: Which fire suppression system is MOST appropriate for a data center server room to minimize hardware damage?
- Wet-pipe sprinkler system
- Dry-pipe sprinkler system
- Clean agent gaseous suppression (e.g., FM-200 or Novec 1230) (Correct answer)
- Foam-based suppression system
Correct answer: Clean agent gaseous suppression (e.g., FM-200 or Novec 1230)
Clean agent gaseous systems suppress fire without leaving residue or causing water damage, making them ideal for protecting sensitive electronic equipment.
Question 5: A system administrator must define the Maximum Tolerable Downtime (MTD) for a payroll system that processes checks every two weeks. Which value is MOST appropriate for MTD?
- 4 hours
- 14 days (Correct answer)
- 72 hours
- 30 minutes
Correct answer: 14 days
MTD for a bi-weekly payroll system is typically up to 14 days, as missing one full payroll cycle would be unacceptable, so recovery must occur within that window.
Question 6: During a tabletop exercise, team members walk through a disaster scenario step-by-step. What is the KEY advantage of this exercise type over a full simulation?
- It tests actual system failover mechanisms
- It identifies plan gaps with minimal cost and no operational disruption (Correct answer)
- It validates RTO and RPO metrics with real data
- It replaces the need for a Business Impact Analysis
Correct answer: It identifies plan gaps with minimal cost and no operational disruption
Tabletop exercises expose weaknesses in plans and team understanding through discussion at very low cost, without risking production systems or causing downtime.
Question 7: What does the term 'Recovery Point Objective (RPO)' define in the context of disaster recovery planning?
- The maximum acceptable length of time a system can be offline
- The maximum acceptable amount of data loss measured in time (Correct answer)
- The target time to restore a system to full capacity
- The point in the recovery process when testing begins
Correct answer: The maximum acceptable amount of data loss measured in time
RPO defines how much data loss (measured as a time interval) is acceptable, determining the required backup frequency.
CSA Emergency Preparedness & Safety 2
During a building evacuation drill, a system administrator discovers that a critical server room door is locked and staff cannot exit quickly.
What is the FIRST priority action?