Study guide 7: Resiliency and site security
Domain 3: Security Architecture · Not started
Main exam topics
Cloud and on-premises systems; virtualization, containers and industrial systems; shared responsibility; secure infrastructure and communications; segmentation and firewalls; protecting data at rest, in transit and in use; encryption, DLP, backups, redundancy and recovery.
SY0-701 topic overview · Independent study resource, not a prediction of exam questions.
Lesson plan · 75 minutes
By the end of this lesson you will be able to:
- Track assets and dispose of media securely
- Choose redundancy: RAID, clustering, load balancing, hot/warm/cold sites
- Select backup types and continuity tests
- Apply physical controls such as bollards, vestibules and sensors
Topic 7A — Asset management
Maintain an inventory with owners and classification. Track changes through the lifecycle. At end of life, sanitize media (overwrite, cryptographic erase, degauss) or destroy it (shred, pulverize) and obtain a certificate of destruction.
Topic 7B — Redundancy
High availability removes single points of failure: RAID for disks, dual power and UPS/generators, NIC teaming, clustering and load balancing. Sites: hot sites are ready immediately, warm sites need data, cold sites provide space only. Geographic dispersion protects against regional disasters; platform diversity reduces common flaws. Backups: full, incremental (since last backup, fast to make, slow to restore) and differential (since last full). Snapshots, replication and journaling support recovery. Test with tabletop exercises, failover tests, simulations and parallel processing. Define RPO (acceptable data loss) and RTO (acceptable downtime).
Topic 7C — Physical security
Layer controls: fencing, lighting, bollards to stop vehicles, access badges, access control vestibules to stop tailgating, guards, cameras and sensors (infrared, pressure, microwave, ultrasonic). Locks range from keyed to biometric. Mantraps and visitor logs support accountability.
Saved