Infrastructure Considerations

Question 1 of 6

Which metric specifically measures the average time required to restore a failed system to full operational status?

A. MTTF (Mean Time to Failure) B. MTTR (Mean Time to Repair) C. MTBF (Mean Time Between Failures) D. RTO (Recovery Time Objective)

Question 2 of 6

A company's web application automatically provisions 15 additional server instances during a traffic surge and removes them when traffic drops — without any manual intervention. Which concept BEST describes this behavior?

A. High availability B. Elasticity C. Redundancy D. Load balancing

Question 3 of 6

An organization purchases a cybersecurity insurance policy to cover financial losses from ransomware attacks. This is BEST described as which risk management strategy?

A. Risk avoidance B. Risk transference C. Risk mitigation D. Risk acceptance

Question 4 of 6

A security team discovers that the building's HVAC control system has a known remote code execution vulnerability. The vendor discontinued support three years ago and no patch will ever be released. What is the MOST appropriate compensating control?

A. Install an endpoint detection and response (EDR) agent on the HVAC controller B. Isolate the HVAC controller on a dedicated network segment with a firewall permitting only required traffic C. Apply the most recent third-party patch available for the firmware D. Enable full disk encryption on the HVAC controller

Question 5 of 6

A cloud application automatically scales from 4 web server instances to 20 instances during peak load. Which statement about security monitoring is CORRECT in this scenario?

A. The SIEM automatically detects new instances and begins collecting their logs without any configuration changes B. Security monitoring only needs to cover the load balancer, since all traffic passes through it C. The security monitoring configuration must be included in the auto-scaling launch template so all new instances are monitored from the moment they are provisioned D. Security monitoring can be applied retroactively after the peak period ends

Question 6 of 6

An organization must recover 50 malware-infected workstations as quickly as possible. Restoring from original installation media takes 90 minutes per workstation. Restoring from a pre-built corporate image takes 15 minutes per workstation. What is the PRIMARY security advantage of the corporate image approach, beyond the time savings?

A. Corporate images automatically remove malware without requiring a full reinstall B. The corporate image includes a pre-configured, pre-patched, and pre-validated baseline — eliminating the risk of deploying an unpatched OS during recovery C. Corporate images are encrypted, preventing attackers from analyzing the deployed OS D. Original installation media cannot be used after a malware infection

Matching

Match each description to the infrastructure consideration it best represents.

1. The average time from failure detection to full system restoration — the primary metric for how quickly an organization recovers from outages

2. A policy that pays out business interruption losses and legal costs when a ransomware attack causes extended downtime

3. Battery-backed power conditioning that provides immediate electrical power during a utility outage while a generator starts

4. Using Terraform to automatically provision all application components — web server, database, firewall rules, and monitoring agents — in the correct order with verified configuration

1. 2. 3. 4.

A. Ease of Deployment (Orchestration)

B. Resilience (MTTR)

C. Power (UPS)

D. Risk Transference (Cybersecurity Insurance)

Infrastructure Considerations Quiz

Matching