Recovery Testing

Question 1 of 6

Which constraint in recovery testing ensures that the test procedures do not disrupt live services for real users?

Enforcing a time-limited testing window Rules of engagement — do not touch production systems Using a specific, pre-agreed scenario Conducting tests on an annual schedule

Question 2 of 6

An organization brings together its IT director, CISO, HR lead, operations manager, and legal counsel to verbally walk through a simulated ransomware attack — no systems are started, no data is moved, no hardware is reconfigured. What type of recovery test is this?

Tabletop exercise Failover test Phishing simulation Parallel processing validation

Question 3 of 6

During a failover test, the primary firewall is deliberately shut down. What is the expected user experience if the failover is working correctly?

Users receive a notification that the system is switching to backup Users must log out and log back in to reconnect to the secondary system Users experience no visible disruption — traffic is transparently redirected Users experience a brief planned outage while administrators manually activate the backup

Question 4 of 6

A phishing simulation email reaches employees' inboxes and 34% of users click the link. What do these two findings tell the security team?

The failover system requires reconfiguration before the next test Parallel processing fault tolerance needs improvement Tabletop exercise procedures have not been followed correctly Both the email security controls and employee security awareness training need improvement

Question 5 of 6

A transaction processing system uses eight CPU cores. Two cores fail and are automatically removed from the active pool. The system continues processing on the remaining six cores at reduced throughput. What recovery property does this illustrate?

Automatic failover to a geographically dispersed backup site Graceful degradation through parallel processing fault tolerance Tabletop exercise outcomes applied to real infrastructure changes Simulation testing of redundant network components

Question 6 of 6

Which is a recognized limitation of tabletop exercises that requires organizations to use other recovery testing methods as well?

Tabletop exercises are too expensive to conduct more than once per decade Tabletop exercises require production systems to be taken offline temporarily Tabletop exercises do not validate actual system behavior or infrastructure performance Tabletop exercises can only be conducted by external consultants, not internal staff

Matching

1. Department heads and IT staff meet to discuss what they would each do if the primary data center lost power — no systems are started and no hardware is touched.

2. Engineers shut down the primary network router during a maintenance window to confirm that the secondary router automatically assumes the virtual IP and resumes routing within the target time.

3. The security team sends a fake "urgent password reset" email to all 600 employees, then measures how many had it caught by the email filter vs. how many clicked the link in their inbox.

4. Administrators disable 3 of 12 processing nodes and verify that the system detects the faults, removes those nodes from the active pool, and continues processing transactions on the remaining 9.

1. 2. 3. 4.

A. Tabletop exercise

B. Failover test

C. Phishing simulation

D. Parallel processing validation

Recovery Testing — Quiz

Matching