Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 2
ThorTeaches.com has recently implemented a new backup system for all data stored on servers and computers. As the IT security manager, it is your responsibility to ensure the backup system is working properly and all data is being backed up properly. You have noticed that there have been several instances where data has been lost or corrupted, and you suspect it may be due to issues with the backup system. Which of the following is the most effective method for verifying the integrity of data backups?
- A Running diagnostic tests on the backup system to ensure it is functioning properly
- B Asking employees to report any issues they have had with data loss or corruption
- C Checking the logs of the backup system to ensure there are no errors or issues
- D Periodically restoring and comparing data from backups to the original data
Reveal correct answer
Correct answer: D
Explanation
The correct answer: Periodically restoring and comparing data from backups to the original data is the most effective method for verifying the integrity of data backups. This process, often referred to as a "restore rehearsal," allows you to confirm that the data can be recovered in its entirety and is identical to the original data. It not only checks that the backup was created successfully, but also that it can be successfully restored, which is the ultimate purpose of the backup. The incorrect answers: Running diagnostic tests on the backup system to ensure it is functioning properly: While running diagnostic tests on the backup system can provide information about the functionality of the system itself, it doesn't necessarily validate the integrity of the data within the backups. The backup system could function properly, but issues such as data corruption could still occur during the backup process. Checking the logs of the backup system to ensure there are no errors or issues: Checking the logs of the backup system is an important part of monitoring the backup process, but it doesn't directly verify the integrity of the backup data. Error-free logs can indicate that the backup process is working as expected, but they cannot guarantee the successful restoration of the backed-up data. Asking employees to report any issues they have had with data loss or corruption: While it's important to address employee-reported issues, this approach is reactive, not proactive, and relies on the assumption that employees will notice and report issues. Also, it does not directly validate the integrity of the backups, as employees might not interact with the backed-up data until they need to restore it, which could be too late. Regularly restoring and comparing backup data is a more direct and proactive approach.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
