1
Guide to Disaster Recovery
Chapter 7 Solutions
Review Questions
1. Which of the following should be considered threats to computer security? Answer:
2. IT professionals must always successfully protect their systems, while hackers can attack at their
3. Which groups of people respond to computer hacking incidents?
4. Define a terrorist incident. Answer A violent act that endangers human life, violates U.S. or state
6. What is cyberterrorism? Answer: The use of cybertools to shut down critical national infrastructures
7. What is HIPAA? Answer: The Health Insurance Portability and Accountability Act, which
8. What is the ping of death? Answer: Computer attacks that occur when hackers modify the PING
10. Explain how application-layer attacks are implemented. Answer: These attacks exploit well-known
2
11. What is an autorooter? Answer: Programs that automate the entire hacking process. Computers are
12. How does network reconnaissance help hackers? Answer: Network reconnaissance is the gathering
13. When responding to a hacking incident, why should you use the telephone to communicate?
14. What steps should IT staff take after a computer attack has been investigated? Answer: After
15. When first reporting a computer crime to law enforcement agencies, what information must you
16. What type of immediate impact can hacking attacks have on an organization? Answer: Damage to
17. What is loss of system or data integrity? Answer: System and data integrity refers to the
18. What general procedures does NIST recommend to ease the recovery of damaged computer
19. Because so many users in an organization rely on large systems, what should an organization do to
3
20. What types of practices can help to reduce network downtime? Answer: 1.) Redundant
Hands-On Projects Tips
The hands-on projects in this text are designed for students to gain experience in developing a disaster recovery
plan. Students are expected to select an organization for which to develop a plan. This may be easier for
In grading the hands-on projects the instructor should consider the following:
Not all hands-on projects in this chapter will apply to all organizations. Students should complete the projects
that are appropriate for the organization for which they are developing a disaster recovery plan.
Project 7-1
This project is designed for the student to learn how to establish a computer incident response team. Students are
to designate members of a computer incident response team within the organization for which they are
Project 7-2
This project is designed for the student to learn how develop procedures for reporting computer incidents to law
enforcement agencies. Students should use the generic disaster recovery procedure sheet from Chapter 5, or
develop their own procedure sheet. The procedures should include the following information:
Project 7-3
This project is designed for the student to learn how develop procedures for reporting computer hacking
incidents to end-user departments if an intrusion results in downtime. Students should use the generic
disaster recovery procedure sheet from Chapter 5, or develop their own procedure sheet. The procedures
should include the following information:
4
Case Projects Discussion
The case projects in this book all cover the same company, Harris and Heartfield Manufacturing. As with the
hands-on projects, the case projects are designed to build skills and knowledge for disaster recovery
Case Project: Harris and Heartfield Manufacturing
This project is designed to help students understand how establish inter organizational relationships that will be
helpful when responding to a disaster. In this assignment students have been asked to develop general
Optional Team Case Assignments Discussion
The optional team case assignments in this book are designed to develop communications and research skills of
students. The assignments in each chapter require students to do an activity that they will likely need to
accomplish during the disaster recovery planning process.
Team Case Assignment 1
This assignment requires student is to identify law enforcement agencies in their geographical area that could