1
00:00:06,420 --> 00:00:09,300
- Welcome to lesson 13, deep dive quiz.

2
00:00:09,300 --> 00:00:11,250
Now, lesson 13 was all about explaining

3
00:00:11,250 --> 00:00:12,930
the importance of resilience

4
00:00:12,930 --> 00:00:15,360
and recovery in security architecture,

5
00:00:15,360 --> 00:00:17,040
and we had three lessons.

6
00:00:17,040 --> 00:00:19,590
13.1, we talked about backup and recovery

7
00:00:19,590 --> 00:00:22,500
and lots of different backup
and recovery strategies.

8
00:00:22,500 --> 00:00:25,140
In 13.2, we talked about resiliency,

9
00:00:25,140 --> 00:00:27,870
everything from system
resiliency to site resiliency.

10
00:00:27,870 --> 00:00:31,590
And in lesson 0.3, we talked
about continuity of operations,

11
00:00:31,590 --> 00:00:35,130
specifically developing
disaster recovery plans

12
00:00:35,130 --> 00:00:37,560
and business continuity plans.

13
00:00:37,560 --> 00:00:39,063
So let's do a quiz together.

14
00:00:40,920 --> 00:00:41,760
You ready?

15
00:00:41,760 --> 00:00:42,750
Do you have some paper?

16
00:00:42,750 --> 00:00:44,220
Do you have a pencil?

17
00:00:44,220 --> 00:00:45,750
Okay, I want you to have all of that

18
00:00:45,750 --> 00:00:48,030
so you can keep putting me on pause

19
00:00:48,030 --> 00:00:50,133
and write down your answers.

20
00:00:51,930 --> 00:00:54,720
Okay, we wanna order
the data backup options

21
00:00:54,720 --> 00:00:56,940
in sequence of recovery time,

22
00:00:56,940 --> 00:00:58,560
beginning from the slowest,

23
00:00:58,560 --> 00:01:02,280
that'll be the bottom
number five, to the fastest.

24
00:01:02,280 --> 00:01:04,410
So this is our data backup options

25
00:01:04,410 --> 00:01:06,480
in sequence of recovery time.

26
00:01:06,480 --> 00:01:08,220
What's gonna be the slowest recovery time?

27
00:01:08,220 --> 00:01:10,020
We'll put that at the bottom, number five,

28
00:01:10,020 --> 00:01:13,440
to the fastest, which we'll
put up on the top, number one.

29
00:01:13,440 --> 00:01:14,970
Synchronous replication,

30
00:01:14,970 --> 00:01:17,400
differential, full backup,

31
00:01:17,400 --> 00:01:20,553
incremental or asynchronous replication.

32
00:01:21,420 --> 00:01:24,810
So which of these is
going to be the slowest

33
00:01:24,810 --> 00:01:26,553
in terms of recovery?

34
00:01:28,170 --> 00:01:30,150
Well, we should be
looking at differential,

35
00:01:30,150 --> 00:01:31,890
full and incremental.

36
00:01:31,890 --> 00:01:33,330
Those are our traditional.

37
00:01:33,330 --> 00:01:35,610
We know that synchronous
and asynchronous replication

38
00:01:35,610 --> 00:01:37,440
is gonna be relatively quick.

39
00:01:37,440 --> 00:01:41,340
So which is gonna be slowest to restore?

40
00:01:41,340 --> 00:01:43,800
Again, this is our recovery time.

41
00:01:43,800 --> 00:01:44,640
Well, let's see.

42
00:01:44,640 --> 00:01:46,740
Differential, we would use a full backup

43
00:01:46,740 --> 00:01:48,900
and just the latest differential.

44
00:01:48,900 --> 00:01:51,270
A full backup, we would
just use the full backup.

45
00:01:51,270 --> 00:01:52,440
Ah, but in incremental,

46
00:01:52,440 --> 00:01:53,880
we'd have to have the last full backup

47
00:01:53,880 --> 00:01:57,420
and then every single
incremental since then.

48
00:01:57,420 --> 00:01:58,970
So that's gonna be our slowest.

49
00:01:59,940 --> 00:02:03,630
Next, well would be our
full plus our differential

50
00:02:03,630 --> 00:02:05,550
and then of course our full.

51
00:02:05,550 --> 00:02:07,710
Now we have asynchronous replication

52
00:02:07,710 --> 00:02:09,360
and synchronous replication

53
00:02:09,360 --> 00:02:11,490
and they actually just
fell in the right order.

54
00:02:11,490 --> 00:02:14,040
Asynchronous replication is where we have,

55
00:02:14,040 --> 00:02:15,720
we're writing to two locations,

56
00:02:15,720 --> 00:02:17,460
but we can continue operations

57
00:02:17,460 --> 00:02:20,040
before the remote write is complete,

58
00:02:20,040 --> 00:02:21,810
where in synchronous replication,

59
00:02:21,810 --> 00:02:23,790
they both have to be in sync.

60
00:02:23,790 --> 00:02:27,300
We have to complete both
writes before we can continue.

61
00:02:27,300 --> 00:02:30,720
So going from the slowest to the fastest,

62
00:02:30,720 --> 00:02:33,960
incremental, differential, backup,

63
00:02:33,960 --> 00:02:37,050
asynchronous and synchronous.

64
00:02:37,050 --> 00:02:38,670
Do you agree, is that what you have?

65
00:02:38,670 --> 00:02:41,493
Let's try it, and that is correct.

66
00:02:43,740 --> 00:02:48,510
Which description best matches
this RAID configuration?

67
00:02:48,510 --> 00:02:49,800
So we're looking at RAID level one.

68
00:02:49,800 --> 00:02:52,530
We have two disks, disk zero and disk one.

69
00:02:52,530 --> 00:02:54,180
Is this disk striping,

70
00:02:54,180 --> 00:02:55,440
disk back up,

71
00:02:55,440 --> 00:02:58,833
disk duplexing or disk mirroring?

72
00:02:59,670 --> 00:03:01,380
All right, take a look at the picture.

73
00:03:01,380 --> 00:03:02,490
It says disk striping,

74
00:03:02,490 --> 00:03:07,260
disk backup, disk duplexing
or disk mirroring?

75
00:03:07,260 --> 00:03:08,160
What do you think?

76
00:03:10,260 --> 00:03:11,610
Well, it's not striping,

77
00:03:11,610 --> 00:03:13,290
because striping is, I'm gonna stripe

78
00:03:13,290 --> 00:03:14,730
across multiple drives,

79
00:03:14,730 --> 00:03:16,360
and then if I'm doing it
for security purposes,

80
00:03:16,360 --> 00:03:18,333
I will have also a parody bit.

81
00:03:19,680 --> 00:03:22,200
I guess you could consider
it a form of backup,

82
00:03:22,200 --> 00:03:23,763
but not really.

83
00:03:24,990 --> 00:03:27,690
Disk duplexing, well,
disk plexing requires,

84
00:03:27,690 --> 00:03:30,030
I have two controllers and
I don't see any evidence

85
00:03:30,030 --> 00:03:32,670
of having two controllers
here in this picture.

86
00:03:32,670 --> 00:03:34,260
I'm gonna choose disk mirroring.

87
00:03:34,260 --> 00:03:36,810
Disk mirroring says that we
generally have one controller,

88
00:03:36,810 --> 00:03:39,780
two drives, and everything
that is written on one drive

89
00:03:39,780 --> 00:03:41,250
is written on the other drive

90
00:03:41,250 --> 00:03:44,730
and either drive can fail
and we continue to operate.

91
00:03:44,730 --> 00:03:45,870
Do you agree?

92
00:03:45,870 --> 00:03:46,893
Let's check it out.

93
00:03:48,030 --> 00:03:49,173
And that is correct.

94
00:03:50,730 --> 00:03:52,410
Right, question three.

95
00:03:52,410 --> 00:03:56,310
This principle states that
resources should not be changed,

96
00:03:56,310 --> 00:03:58,560
only created and destroyed.

97
00:03:58,560 --> 00:04:00,630
We've talked about this
a couple of times now.

98
00:04:00,630 --> 00:04:02,400
Is this orchestration,

99
00:04:02,400 --> 00:04:04,080
configuration drift,

100
00:04:04,080 --> 00:04:07,650
immutability or infrastructure-as-code?

101
00:04:07,650 --> 00:04:09,360
We're not gonna try to fix anything,

102
00:04:09,360 --> 00:04:11,160
we only create and destroy.

103
00:04:11,160 --> 00:04:12,483
Create and destroy.

104
00:04:13,530 --> 00:04:14,850
Go ahead, make that choice.

105
00:04:14,850 --> 00:04:16,770
Orchestration, configuration drift,

106
00:04:16,770 --> 00:04:19,743
immutability or infrastructure-as-code.

107
00:04:23,700 --> 00:04:24,840
Well, let's talk through these.

108
00:04:24,840 --> 00:04:29,370
Orchestration is when we
automate the connection,

109
00:04:29,370 --> 00:04:33,540
if you will, or the orchestra
of disparate systems.

110
00:04:33,540 --> 00:04:36,210
Configuration drift was when our primary

111
00:04:36,210 --> 00:04:38,760
and secondary systems get out of sync

112
00:04:38,760 --> 00:04:40,290
and infrastructure-as-code

113
00:04:40,290 --> 00:04:44,010
is to using code for
automated provisioning.

114
00:04:44,010 --> 00:04:46,260
The answer we liked, even before we said

115
00:04:46,260 --> 00:04:49,170
what all the other ones were,
was a immutability, right?

116
00:04:49,170 --> 00:04:50,400
Immutability is the principle

117
00:04:50,400 --> 00:04:52,890
that resources should not be changed.

118
00:04:52,890 --> 00:04:55,023
We're only gonna create and destroy.

119
00:04:56,820 --> 00:04:57,813
And that's correct.

120
00:04:59,760 --> 00:05:01,320
All right, we've got some matching to do.

121
00:05:01,320 --> 00:05:02,831
We're gonna match the
alternate site locations

122
00:05:02,831 --> 00:05:05,880
with their descriptions
and the site locations

123
00:05:05,880 --> 00:05:07,410
we have going down the left-hand side

124
00:05:07,410 --> 00:05:10,650
are warm site, disaster
recovery as a service,

125
00:05:10,650 --> 00:05:15,650
DRaaS, a mobile site, a
cold site and a hot site.

126
00:05:15,690 --> 00:05:17,970
On the right-hand side, we
have a self-contained unit,

127
00:05:17,970 --> 00:05:21,240
systems are pre-configured
and data is near-time,

128
00:05:21,240 --> 00:05:24,480
HVAC communications
infrastructure and equipment,

129
00:05:24,480 --> 00:05:27,630
basic HVAC and power infrastructure

130
00:05:27,630 --> 00:05:31,530
and full recovery in a
cloud-based environment.

131
00:05:31,530 --> 00:05:33,180
It's a great place to put me on pause

132
00:05:33,180 --> 00:05:38,180
and write down these
connections, these matches.

133
00:05:38,820 --> 00:05:40,260
All right, let's try it.

134
00:05:40,260 --> 00:05:41,460
So let's see.

135
00:05:41,460 --> 00:05:45,180
I wanna start, I like this
one about the cloud, right?

136
00:05:45,180 --> 00:05:47,040
Full recovery in a
cloud-based environment,

137
00:05:47,040 --> 00:05:48,240
do I have a cloud option?

138
00:05:48,240 --> 00:05:52,890
I do, DRaaS, disaster
recovery as a service.

139
00:05:52,890 --> 00:05:55,140
Okay, we got that one out of the way.

140
00:05:55,140 --> 00:05:56,340
Starting back up at the top,

141
00:05:56,340 --> 00:05:57,550
a self-contained unit.

142
00:05:57,550 --> 00:06:00,780
Well, a self-contained unit
is gonna be a mobile site

143
00:06:00,780 --> 00:06:03,480
that's gonna show up with
hardware and software.

144
00:06:03,480 --> 00:06:05,910
I've probably been sending
my backups there ready to go.

145
00:06:05,910 --> 00:06:07,830
But remember, I have to give it power

146
00:06:07,830 --> 00:06:10,140
and communications connectivity

147
00:06:10,140 --> 00:06:12,633
and water and waste management.

148
00:06:13,800 --> 00:06:15,330
All right, so what do I have next?

149
00:06:15,330 --> 00:06:18,750
I have HVAC communications
infrastructure and equipment,

150
00:06:18,750 --> 00:06:20,820
basic HVAC and power

151
00:06:20,820 --> 00:06:24,570
and systems are pre-configured
and data is near-time.

152
00:06:24,570 --> 00:06:25,800
Well, they look like they're actually

153
00:06:25,800 --> 00:06:27,360
in the right places, don't they?

154
00:06:27,360 --> 00:06:30,540
A warm site has HVAC
communications infrastructure

155
00:06:30,540 --> 00:06:31,590
and equipment,

156
00:06:31,590 --> 00:06:34,157
but we're going to need
to update the systems

157
00:06:34,157 --> 00:06:36,750
and we're gonna need to restore data.

158
00:06:36,750 --> 00:06:39,420
A cold site and that's just a slab, right?

159
00:06:39,420 --> 00:06:41,850
Basic HVAC and power infrastructure,

160
00:06:41,850 --> 00:06:43,770
it's really gonna need everything.

161
00:06:43,770 --> 00:06:46,480
And a hot site, systems are pre-configured

162
00:06:46,480 --> 00:06:48,030
and data is near-time

163
00:06:48,030 --> 00:06:49,740
because we've probably
replicated the data,

164
00:06:49,740 --> 00:06:52,410
either asynchronously or synchronously.

165
00:06:52,410 --> 00:06:55,170
So a warm site, HVAC
communications infrastructure

166
00:06:55,170 --> 00:06:57,480
and equipment, disaster
recovery as a service,

167
00:06:57,480 --> 00:07:00,900
or DRaaS, full recovery in
a cloud-based environment,

168
00:07:00,900 --> 00:07:03,120
a mobile site, self-contained unit,

169
00:07:03,120 --> 00:07:06,570
a cold site, basic HVAC
and power infrastructure

170
00:07:06,570 --> 00:07:08,742
and a hot site, systems are pre-configured

171
00:07:08,742 --> 00:07:10,920
and the data is near-time.

172
00:07:10,920 --> 00:07:12,270
You agree, you like it?

173
00:07:12,270 --> 00:07:13,470
I will check.

174
00:07:13,470 --> 00:07:15,270
And that is correct.

175
00:07:15,270 --> 00:07:17,790
So our last question, question five.

176
00:07:17,790 --> 00:07:21,180
Continuity of operations
is a shared responsibility.

177
00:07:21,180 --> 00:07:22,885
Which group is responsible
for the approval

178
00:07:22,885 --> 00:07:25,830
of continuity of operations policies

179
00:07:25,830 --> 00:07:29,280
and oversight of strategy
development and testing?

180
00:07:29,280 --> 00:07:34,050
Key words here are the approval
of policy and oversight.

181
00:07:34,050 --> 00:07:37,260
Is this data custodians,
board of directors,

182
00:07:37,260 --> 00:07:39,693
auditors or system owners?

183
00:07:41,220 --> 00:07:42,420
What do you think?

184
00:07:42,420 --> 00:07:44,160
What are you gonna choose?

185
00:07:44,160 --> 00:07:46,860
Again, responsible for the
approval of the policies

186
00:07:46,860 --> 00:07:49,830
and oversight of the strategy
development and testing.

187
00:07:49,830 --> 00:07:52,630
So they get reported back to,
they know what's going on.

188
00:07:54,090 --> 00:07:56,940
I'm gonna choose board of directors,

189
00:07:56,940 --> 00:07:58,740
because ultimately the board of directors

190
00:07:58,740 --> 00:08:00,150
are an equivalent board of trustees

191
00:08:00,150 --> 00:08:02,400
in an organization or agency leadership

192
00:08:02,400 --> 00:08:03,918
are the ones that are responsible

193
00:08:03,918 --> 00:08:05,880
for approving the policies

194
00:08:05,880 --> 00:08:09,900
and for oversight of strategy
development and testing.

195
00:08:09,900 --> 00:08:10,923
Let's check it out.

196
00:08:11,820 --> 00:08:13,260
And that's correct.

197
00:08:13,260 --> 00:08:14,880
Awesome, great job.

198
00:08:14,880 --> 00:08:16,230
So what's up next?

199
00:08:16,230 --> 00:08:18,660
Module four, we're going
right into a new module.

200
00:08:18,660 --> 00:08:20,190
Lesson 14.

201
00:08:20,190 --> 00:08:23,340
Given a scenario, apply
common security techniques

202
00:08:23,340 --> 00:08:24,810
to computing resources.

203
00:08:24,810 --> 00:08:25,760
I'll see you there.