CISA Information Systems Operations and Business Resilience — All Questions With Answers

Refer to the exhibit.

Server: DB01
Backup Job: Full_Backup_DB01
Status: Failed
Error: 0x80070003 - The system cannot find the path specified.
Backup Destination: \\BACKUPSRV\DBBackups\DB01\

Last Successful Backup: 2023-03-15 03:00 AM
Scheduled Backup Time: Daily 02:00 AM

Refer to the exhibit.

interface GigabitEthernet0/1
 description Link to Primary Site
 ip address 10.1.1.1 255.255.255.252
 standby 1 ip 10.1.1.2
 standby 1 priority 110
 standby 1 preempt
!
interface GigabitEthernet0/2
 description Link to DR Site
 ip address 10.2.2.1 255.255.255.252
 standby 2 ip 10.2.2.2
 standby 2 priority 100
!
router ospf 1
 network 10.0.0.0 0.255.255.255 area 0
!
ip route 0.0.0.0 0.0.0.0 10.1.1.2

Refer to the exhibit.

```
Backup Log for ArcServe UDP – 2024-05-21
========================================
Job Name: Full_Backup_Weekly
Start Time: 02:00
End Time: 04:30
Status: Completed with warnings
Details:
- Volume C: Backup successful (40.5 GB)
- Volume D: Backup successful (120.2 GB)
- Volume E: Backup failed (error code 0x80070020 – file in use)
- Volume F: Backup successful (25.0 GB)

Job Name: Incremental_Backup_Daily
Start Time: 12:00
End Time: 12:45
Status: Failed
Details:
- Volume C: Backup failed (error code 0x807800C5 – insufficient storage)
- Volume D: Backup failed (error code 0x807800C5 – insufficient storage)
- Volume E: Backup failed (error code 0x807800C5 – insufficient storage)
- Volume F: Backup failed (error code 0x807800C5 – insufficient storage)
```

Refer to the exhibit.

```
ERROR: 2019-10-22 14:23:45.678
Severity: CRITICAL
Source: BackupServer1
Message: Backup job 'FinanceDB_Full' failed.
Reason: Unable to mount virtual disk 'FinData-001' from storage array 'SAN01'.
Suggested action: Check storage array connectivity and LUN masking.
```

Refer to the exhibit.

```
Configuration: Log Shipping
Primary Server: SQLPROD
Secondary Server: SQLDR
Status: Normal
Last backup created: 2020-03-15 06:00:00
Last restore completed: 2020-03-15 06:05:00
Log shipping interval: 15 minutes
Current latency: 18 minutes
Alert threshold: 30 minutes
```

Refer to the exhibit.

```
Event Viewer: Security Log
Event ID: 4624 (Successful Logon)
Account Name: jdoe
Logon Type: 3 (Network)
Source Network Address: 10.0.0.15
Workstation Name: WS-FINANCE
Logon Process: NtLmSsp
Authentication Package: NTLM

Event ID: 4624 (Successful Logon)
Account Name: jdoe
Logon Type: 10 (Remote Interactive)
Source Network Address: 192.168.10.50
Logon Process: User32
Authentication Package: Negotiate

Event ID: 4634 (Logoff)
Account Name: jdoe
Logon Time: 2020-06-01 23:45:12
```

Refer to the exhibit.
2024-03-12 04:30:00 ERROR Backup job for server SQL01 failed. Error code: 0x80070001. Reason: The device is not ready.

Refer to the exhibit.
recovery_time_objective = 2 hours;
recovery_point_objective = 15 minutes;
replication_type = synchronous;
bandwidth = 100 Mbps;
data change rate = 50 GB per hour;

Refer to the exhibit.
At 14:23 UTC, an unauthorized user accessed the HR database. The intrusion detection system alerted at 14:25. The incident response team was notified at 16:00. The database logs show query activity from 14:20 to 14:45. The DBA terminated the session at 15:10.

Backup Job Report - 2025-03-15
Job Name: DailyFullBackup_DB01
Status: FAILED
Error Code: E-103
Error Description: Unable to mount backup target /mnt/backup
Recommended Action: Check network connectivity to storage array.

access-list extended BLOCK-MALICIOUS
deny ip 10.0.1.0 0.0.0.255 any
deny tcp any host 192.168.1.100 eq 443
permit ip 10.0.0.0 0.0.255.255 any

Backup Policy "CriticalData" {
  Schedule: Daily at 02:00
  Retention: 30 days
  Encryption: AES-256
  Offsite: Enabled
}

Compliance requirement: Retain financial data for 7 years.