Page 774 - StudyBook.pdf

758 Chapter 12 • Operational and Organizational Security: Policies and Disaster Recovery

10. Changes in the law now require your organization to store data on clients for
three years, at which point the data are to be destroyed.When the expiration
date on the stored data is reached, any printed documents are to be shredded
and media that contains data on the client is to be destroyed.What type of doc-
umentation would you use to specify when data is to be destroyed?
A. Disaster recovery documentation
B. Retention policies and logs

C. Change documentation
D. Destruction logs

11. You are designing a backup regime that will allow you to recover data to
servers in the event of a disaster. Should a disaster occur, you want to use a
backup routine that will take minimal time to restore.Which of the following
types of backups will you perform?
A. Daily full backups
B. A full backup combined with daily incremental backups

C. A full backup combined with daily differential backups
D. A combination of incremental and differential backups.

12. You are the administrator of a network that is spread across a main building and
a remote site several miles away.You make regular backups of the data on your
servers, which are centrally located in the main building.Where should you
store the backup tapes so they are available when needed in the case of a
disaster?

A. Keep the backup tapes in the server room within the main building, so
they are readily at hand. If a disaster occurs, you will be able to obtain
these tapes quickly and restore the data to servers.

B. Keep the backup tapes in another section of the main building.
C. Keep the backup tapes in the remote site.
D. Keep the backup tapes in the tape drives of the servers so that a rotation
scheme can be maintained.

www.syngress.com