CompTIA® Server+ : It Environment ,Disaster Recovery Concepts

4.5 Given a scenario, classify physical security measures for a server location

The following are good practices that are recommended to be followed

• Password protecting the Servers

• Lock the Servers room, or limit access to the room to authorized server administrators only.

• Lock the cabinet that the server is mounted or sitting in if you cannot lock the actual room.

• Locate all the server back-ups, the server, and the emergency recovery disks at the same place for convenience.

Physical Security

• Lock Doors: Any time the server room is unoccupied it should be locked. Also there should be policies to make sure who has server room keys or key code to get in.

• Rack doors: rack mount servers take up less space and it is easy to secure them as the server can be mounted and can be bolted to the floor making it difficult to move.

• CCTV: security cameras must be installed for continuous monitoring and keeping a record of who all accessed the server room.

• Mantraps: Rooms having mantraps have entry and exit doors on opposite walls and one door cannot be unlocked until other door has been closed.

• Security personnel: A security personal can be appointed to guard the server room and keep a log of who all visit the room.

Access control devices

• Swipe cards and smart cards can be used to access the server room. These cards are programmed to allow access to secure room and also to monitor access using code system.

• Biometric: This includes items such as fingerprint identification, retinal scanning, and voice recognition as a means of identification and ultimately determining access.

Security Procedures

• Limited Access: Only personals authorized should have access to the server room.

• Access Logs: Each time a personal access the server room its log should be maintained.

• Limited hours: A specific time limit should be set for every personal. No bady can access the server room more then specific time limit.

5. Disaster Recovery

5.1 Compare and contrast backup and restoration methodologies, media types and concepts

Disaster Recovery Planning is a practice in which organizations develop policies and procedures to ensure rapid restoration of computer systems and resumption of computer-based operations in the event of a systems disruption. In light of the essential role computers play in virtually all companies, DRP is a critical step in ensuring post-disaster business continuity.

Backup Methodologies

• Full Backup: In this method each time backup is taken all data is backed up without leaving any file. Advantage of this method is that as only one tape or a specific group of tapes (used to take backup) is required to be located for complete restoration. Main disadvantage is it is time consuming and if full backup is taken every day and no data has been changed that day same backup will be taken again.

• Differential Backup: In this method full backup is taken after specific period of time(usually once a week) and frequently (usually every day) those files are backed up which have changed since last full backup. Archive bits are used by backup software to restore files changed. Each backup takes a little longer, but restore requires only two tapes (most recent full backup and most recent differential backup).

• Incremental Backup: In this method full backup is taken after specific period of time (once a week) and files changed since previous incremental backup (daily) are backed up. Because each day backup is different restoration need all files. Quick to back up, but restore requires multiple tapes (last full backup tape plus all incremental tapes since the last full backup).