Practice Test Geeks(CSX) Cybersecurity Nexus Certification Practice Test
← All CSX Flashcard Decks

Recover and Sustain Operations Flashcards

7 cards from real CSX practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Recover and Sustain Operations flashcards as text

  1. During incident recovery, a 'chain of custody' log is MOST important for:

    Answer: Preserving evidence integrity for potential legal proceedings

    Chain of custody documentation ensures that evidence is handled properly and remains admissible if the incident leads to legal action.

  2. Which type of backup strategy captures only data that has changed since the LAST FULL backup?

    Answer: Differential backup

    A differential backup copies all data changed since the last full backup, making restoration require only two sets: the full backup and the latest differential.

  3. What is the primary purpose of 'chaos engineering' in the context of operational resilience?

    Answer: To intentionally introduce failures to test system resilience and identify weaknesses

    Chaos engineering deliberately injects failures into systems to discover weaknesses before real failures occur, improving resilience.

  4. After a major breach, regulators require notification within 72 hours. This requirement is MOST associated with which regulation?

    Answer: GDPR

    GDPR Article 33 mandates that data controllers notify their supervisory authority of a personal data breach within 72 hours of becoming aware of it.

  5. In a recovery scenario, 'failback' refers to:

    Answer: Returning operations to the primary site after it has been restored

    Failback is the process of returning workloads from the recovery/alternate site back to the primary site once it has been fully restored.

  6. Which NIST CSF function is MOST closely associated with restoring services impaired during a cybersecurity incident?

    Answer: Recover

    The NIST CSF 'Recover' function encompasses activities to restore capabilities or services impaired due to a cybersecurity incident.

  7. An organization wants to ensure its recovery plan remains effective over time. Which practice BEST achieves this?

    Answer: Testing and updating the plan on a regular scheduled basis

    Regular testing and updating ensures the recovery plan reflects current systems, personnel, and threats rather than becoming outdated.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. isaca.org — Test delivery, eligibility, fees, passing score, registration deadline, renewal, retake fee, retake policy, score release, time limit · verified Oct 2026