100-160 Question 220
Select 2A company has its main data center located in a region prone to hurricanes. To ensure business continuity, they have implemented a disaster recovery plan (DRP) that includes offsite backups, replication to a secondary data center, and regular drills. During a recent hurricane, the main data center was rendered inoperable, but the company was able to restore critical systems within hours by switching to the secondary data center. Which disaster recovery controls were utilized in this scenario?
- A
Preventive controls
- B
Detective controls
- C
Corrective controls
- D
Administrative controls
- E
Physical controls
Show answer and explanation
Correct answers: A, C
Explanation
The company used preventive controls like offsite backups and replication to ensure critical data and systems were protected in advance. When the disaster occurred, they implemented corrective controls by switching to the secondary data center to restore operations. These controls work together to minimize the impact of disasters and ensure business continuity.
- A. Correct.
Preventive controls are proactive measures designed to reduce the likelihood of a disaster occurring or to minimize its impact. In this scenario, replication to a secondary data center and backups are examples of preventive controls.
- B. Incorrect.
Detective controls are designed to identify issues or disasters after they occur. This scenario does not mention any specific controls for detecting disasters, such as monitoring tools or alarms.
- C. Correct.
Corrective controls are measures taken to restore operations after a disaster has occurred. In this case, switching to the secondary data center to restore critical systems is an example of a corrective control.
- D. Incorrect.
Administrative controls refer to policies, procedures, and guidelines for managing risks and disasters. While these are important, they are not directly highlighted in this scenario.
- E. Incorrect.
Physical controls are measures to protect physical assets, such as securing the data center with locks or barriers. This scenario does not focus on physical controls.