4.9. Reflection Checkpoint
Key Takeaways
Before proceeding, ensure you can:
- Distinguish data at rest encryption (protects stored data from physical access) from data in transit encryption (protects data crossing networks)
- Identify which physical security controls address which threat (mantraps → tailgating; bollards → vehicle attacks; RFID + PIN → card theft alone is insufficient)
- Explain why two passwords do not constitute MFA, and correctly identify the three factor categories
- Select the appropriate DR site type (hot/warm/cold) given an RTO requirement
- Explain why a backup that has never been restore-tested is not validated, and name the failure modes only a restore test catches
- Choose the correct backup method (full, incremental, differential) for a given RPO and restore time requirement
- Distinguish disk wiping (reusable) from degaussing (destroys electronics, doesn't work on SSDs) from physical destruction (irrecoverable)
- Explain why synchronous replication has higher network latency implications than asynchronous
Connecting Forward
Phase 5 applies everything from Phases 2–4 to troubleshooting scenarios. When the exam says "a server is slow" or "users can't log in," you'll draw on hardware knowledge (Phase 2), software and configuration knowledge (Phase 3), and security knowledge (Phase 4) to systematically narrow down the cause. The troubleshooting methodology is the framework; the domain knowledge is the content.
Self-Check Questions
-
A server is being decommissioned that contained PHI (Protected Health Information). The drives are SSDs. Management wants to repurpose the drives for a test environment. What is the correct media sanitization approach for SSDs specifically, and why doesn't degaussing work?
-
An organization has an RTO of 2 hours for its ERP system. The ERP vendor requires the database to be in an application-consistent state at failover. Design the DR site type and replication strategy that meets both requirements, and identify the trade-off of your chosen replication method.
