Benefits and Disadvantages of Cold Sites | SSCP Exam Preparation

Cold Sites: Disadvantages and Limitations

Prev Question Next Question

Question

Which of the following items is NOT a benefit of cold sites?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

A cold site is a permanent location that provide you with your own space that you can move into in case of a disaster or catastrophe.It is one of the cheapest solution available as a rental place but it is also the one that would take the most time to recover.A cold site usually takes one to two weeks for recoverey.

Although major disruptions with long-term effects may be rare, they should be accounted for in the contingency plan.The plan should include a trategy to recover and perform system operations at an alternate facility for an extended period.In general, three types of alternate sites are available: Dedicated site owned or operated by the organization.

Also called redundant or alternate sites; Reciprocal agreement or memorandum of agreement with an internal or external entity; and Commercially leased facility.

Regardless of the type of alternate site chosen, the facility must be able to support system operations as defined in the contingency plan.The three alternate site types commonly categorized in terms of their operational readiness are cold sites, warm sites, or hot sites.Other variations or combinations of these can be found, but generally all variations retain similar core features found in one of these three site types.

Progressing from basic to advanced, the sites are described below: Cold Sites are typically facilities with adequate space and infrastructure (electric power, telecommunications connections, and environmental controls) to support information system recovery activities.

Warm Sites are partially equipped office spaces that contain some or all of the system hardware, software, telecommunications, and power sources.

Hot Sites are facilities appropriately sized to support system requirements and configured with the necessary system hardware, supporting infrastructure, and support personnel.

As discussed above, these three alternate site types are the most common.There are also variations, and hybrid mixtures of features from any one of the three.

Each organization should evaluate its core requirements in order to establish the most effective solution.

Two examples of variations to the site types are: Mobile Sites are self-contained, transportable shells custom-fitted with specific telecommunications and system equipment necessary to meet system requirements.

Mirrored Sites are fully redundant facilities with automated real-time information mirroring.Mirrored sites are identical to the primary site in all technical respects.

There are obvious cost and ready-time differences among the options.In these examples, the mirrored site is the most expensive choice, but it ensures virtually 100 percent availability.Cold sites are the least expensive to maintain, although they may require substantial time to acquire and install necessary equipment.

Partially equipped sites, such as warm sites, fall in the middle of the spectrum.In many cases, mobile sites may be delivered to the desired location within 24 hours, but the time necessary for equipment installation and setup can increase this response time.The selection of fixed-site locations should account for the time and mode of transportation necessary to move personnel and/or equipment there.In addition, the fixed site should be in a geographic area that is unlikely to be negatively affected by the same hazard as the organizations primary site.

The following reference(s)were used for this question: http://csrc.nist.gov/publications/nistpubs/800-34-rev1/sp800-34-rev1_errata-Nov11-2010.pdf.

A cold site is a type of disaster recovery plan where a secondary facility is established and maintained by an organization to recover their IT infrastructure in the event of a disaster. However, it is not equipped with the necessary hardware or software to be operational immediately. It requires installation, configuration, and data restoration before it can be brought online.

The following are the benefits of cold sites:

A. No resource contention with other organizations: A cold site ensures that an organization has access to a separate location that is not shared with other organizations. This means that in the event of a disaster, the organization's resources are not impacted by other organizations.

B. Quick Recovery: Cold sites can help organizations recover their IT infrastructure quickly in the event of a disaster. Although it may take time to install, configure and restore data, it is quicker than starting from scratch.

C. A secondary location is available to reconstruct the environment: A cold site provides a secondary location that can be used to reconstruct the IT environment in the event of a disaster. This ensures that the organization can continue its operations and reduce the impact of the disaster.

D. Low Cost: A cold site is less expensive than other disaster recovery plans, such as hot sites or warm sites, which require hardware and software to be pre-installed and configured. It is also less expensive than having no disaster recovery plan at all.

Therefore, the answer to the question is D. Low Cost is NOT a benefit of cold sites. While cold sites are less expensive than other disaster recovery plans, they still require the organization to purchase and install hardware and software to restore their IT infrastructure.