Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

After a destructive cyberattack, a bank's recovery plan relies on restoring from backups held on the same network as production systems. Which weakness in resilience practice does this most directly illustrate?

The weakness is that backups are not isolated or immutable. If they sit on the same network as production, the same attack can encrypt or destroy them, so recovery fails. Resilient practice keeps offline or immutable copies separate from the compromised environment.

  1. ABackups are not isolated or immutable, so they may be corrupted or encrypted by the same attackCorrect
  2. BBackups are taken too infrequently to meet the RTO
  3. CBackup data is not classified by confidentiality
  4. DStaff are not trained in incident escalation

Explanation

Backups connected to the compromised network can be encrypted or destroyed by the same attacker, defeating recovery. Isolated, offline or immutable copies address this. The other options describe different weaknesses not indicated by the scenario.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions