- Welcome to lesson 13, deep dive quiz.
Now, lesson 13 was all about explaining
the importance of resilience
and recovery in security architecture,
and we had three lessons.
13.1, we talked about backup and recovery
and lots of different backup and recovery strategies.
In 13.2, we talked about resiliency,
everything from system resiliency to site resiliency.
And in lesson 0.3, we talked about continuity of operations,
specifically developing disaster recovery plans
and business continuity plans.
So let's do a quiz together.
You ready?
Do you have some paper?
Do you have a pencil?
Okay, I want you to have all of that
so you can keep putting me on pause
and write down your answers.
Okay, we wanna order the data backup options
in sequence of recovery time,
beginning from the slowest,
that'll be the bottom number five, to the fastest.
So this is our data backup options
in sequence of recovery time.
What's gonna be the slowest recovery time?
We'll put that at the bottom, number five,
to the fastest, which we'll put up on the top, number one.
Synchronous replication,
differential, full backup,
incremental or asynchronous replication.
So which of these is going to be the slowest
in terms of recovery?
Well, we should be looking at differential,
full and incremental.
Those are our traditional.
We know that synchronous and asynchronous replication
is gonna be relatively quick.
So which is gonna be slowest to restore?
Again, this is our recovery time.
Well, let's see.
Differential, we would use a full backup
and just the latest differential.
A full backup, we would just use the full backup.
Ah, but in incremental,
we'd have to have the last full backup
and then every single incremental since then.
So that's gonna be our slowest.
Next, well would be our full plus our differential
and then of course our full.
Now we have asynchronous replication
and synchronous replication
and they actually just fell in the right order.
Asynchronous replication is where we have,
we're writing to two locations,
but we can continue operations
before the remote write is complete,
where in synchronous replication,
they both have to be in sync.
We have to complete both writes before we can continue.
So going from the slowest to the fastest,
incremental, differential, backup,
asynchronous and synchronous.
Do you agree, is that what you have?
Let's try it, and that is correct.
Which description best matches this RAID configuration?
So we're looking at RAID level one.
We have two disks, disk zero and disk one.
Is this disk striping,
disk back up,
disk duplexing or disk mirroring?
All right, take a look at the picture.
It says disk striping,
disk backup, disk duplexing or disk mirroring?
What do you think?
Well, it's not striping,
because striping is, I'm gonna stripe
across multiple drives,
and then if I'm doing it for security purposes,
I will have also a parody bit.
I guess you could consider it a form of backup,
but not really.
Disk duplexing, well, disk plexing requires,
I have two controllers and I don't see any evidence
of having two controllers here in this picture.
I'm gonna choose disk mirroring.
Disk mirroring says that we generally have one controller,
two drives, and everything that is written on one drive
is written on the other drive
and either drive can fail and we continue to operate.
Do you agree?
Let's check it out.
And that is correct.
Right, question three.
This principle states that resources should not be changed,
only created and destroyed.
We've talked about this a couple of times now.
Is this orchestration,
configuration drift,
immutability or infrastructure-as-code?
We're not gonna try to fix anything,
we only create and destroy.
Create and destroy.
Go ahead, make that choice.
Orchestration, configuration drift,
immutability or infrastructure-as-code.
Well, let's talk through these.
Orchestration is when we automate the connection,
if you will, or the orchestra of disparate systems.
Configuration drift was when our primary
and secondary systems get out of sync
and infrastructure-as-code
is to using code for automated provisioning.
The answer we liked, even before we said
what all the other ones were, was a immutability, right?
Immutability is the principle
that resources should not be changed.
We're only gonna create and destroy.
And that's correct.
All right, we've got some matching to do.
We're gonna match the alternate site locations
with their descriptions and the site locations
we have going down the left-hand side
are warm site, disaster recovery as a service,
DRaaS, a mobile site, a cold site and a hot site.
On the right-hand side, we have a self-contained unit,
systems are pre-configured and data is near-time,
HVAC communications infrastructure and equipment,
basic HVAC and power infrastructure
and full recovery in a cloud-based environment.
It's a great place to put me on pause
and write down these connections, these matches.
All right, let's try it.
So let's see.
I wanna start, I like this one about the cloud, right?
Full recovery in a cloud-based environment,
do I have a cloud option?
I do, DRaaS, disaster recovery as a service.
Okay, we got that one out of the way.
Starting back up at the top,
a self-contained unit.
Well, a self-contained unit is gonna be a mobile site
that's gonna show up with hardware and software.
I've probably been sending my backups there ready to go.
But remember, I have to give it power
and communications connectivity
and water and waste management.
All right, so what do I have next?
I have HVAC communications infrastructure and equipment,
basic HVAC and power
and systems are pre-configured and data is near-time.
Well, they look like they're actually
in the right places, don't they?
A warm site has HVAC communications infrastructure
and equipment,
but we're going to need to update the systems
and we're gonna need to restore data.
A cold site and that's just a slab, right?
Basic HVAC and power infrastructure,
it's really gonna need everything.
And a hot site, systems are pre-configured
and data is near-time
because we've probably replicated the data,
either asynchronously or synchronously.
So a warm site, HVAC communications infrastructure
and equipment, disaster recovery as a service,
or DRaaS, full recovery in a cloud-based environment,
a mobile site, self-contained unit,
a cold site, basic HVAC and power infrastructure
and a hot site, systems are pre-configured
and the data is near-time.
You agree, you like it?
I will check.
And that is correct.
So our last question, question five.
Continuity of operations is a shared responsibility.
Which group is responsible for the approval
of continuity of operations policies
and oversight of strategy development and testing?
Key words here are the approval of policy and oversight.
Is this data custodians, board of directors,
auditors or system owners?
What do you think?
What are you gonna choose?
Again, responsible for the approval of the policies
and oversight of the strategy development and testing.
So they get reported back to, they know what's going on.
I'm gonna choose board of directors,
because ultimately the board of directors
are an equivalent board of trustees
in an organization or agency leadership
are the ones that are responsible
for approving the policies
and for oversight of strategy development and testing.
Let's check it out.
And that's correct.
Awesome, great job.
So what's up next?
Module four, we're going right into a new module.
Lesson 14.
Given a scenario, apply common security techniques
to computing resources.
I'll see you there.