Security+
CompTIA Security+ SY0-801 / All lessons / Domain 3.0: Security Architecture
3Domain 3.0: Security Architecture
Security+ topic 3.4

Resilience and Recovery

Resilience means staying available when something fails. High availability uses clustering and load balancing so one failed server does not take down a service. Redundant power uses a UPS for short outages and generators for long ones. Recovery sites range from hot (ready to run right away) to warm (some equipment) to cold (just space and power). Backups can be full, incremental, or differential, and copies should be kept offsite and tested. Snapshots, replication, and journaling help restore data quickly. Plans are tested with tabletop exercises, failover tests, and simulations.

Picture it
SiteReady to runEquipmentCost
HotMinutes to hoursEverything, data kept in syncHighest
WarmHours to daysSome hardware, older dataMedium
ColdDays to weeksSpace and power onlyLowest
Recovery sites trade cost for speed. Pick the one that meets the recovery time objective.

Resilience and Recovery vocabulary

  • Hot site: A fully equipped backup location that can take over almost immediately.
  • Load balancing: Spreading work across several servers so none is overloaded and one can fail safely.
  • UPS: An uninterruptible power supply: a battery that keeps equipment running during short outages.
  • Tabletop exercise: A discussion-based walk-through of how a team would respond to a scenario.

Exam-style practice questions

Try each one, then open the answer. To save your progress, take this quiz in the interactive course.

1. A hospital needs a backup location that can take over almost immediately if its data center fails. Which of the following should it use?

  1. (A) A cold site
  2. (B) A warm site
  3. (C) A hot site
  4. (D) An offsite tape vault
Show answer

(C) A hot site A hot site is fully equipped and ready to run right away.

2. Which of the following keeps servers running for a few minutes during a power outage until a generator starts?

  1. (A) A UPS
  2. (B) A load balancer
  3. (C) A SIEM
  4. (D) A PDU without batteries
Show answer

(A) A UPS A UPS provides battery power for short outages.

3. Leaders meet in a conference room to talk through how they would respond to a ransomware attack, step by step, without touching any systems. Which of the following is this?

  1. (A) A failover test
  2. (B) A tabletop exercise
  3. (C) A penetration test
  4. (D) A parallel processing test
Show answer

(B) A tabletop exercise A discussion-based walk-through is a tabletop exercise.

4. Web traffic is spread across four servers so that if one fails, the others keep the site running. Which of the following is this?

  1. (A) Load balancing
  2. (B) Journaling
  3. (C) Tokenization
  4. (D) Sandboxing
Show answer

(A) Load balancing Load balancing spreads work and supports high availability.

Open 3.4 in the interactive course