Resiliency Fundamentals
Incident Response
Technology Concepts
Planning & Recovery
Quality & Control
100

SPOF stands for:
A. Spaghetti Party on Friday
B. Superhero Parade of Fun
C. Service Priority Oversight Framework
D. Single Point of Failure

  D. Single Point of Failure

100

When a disruption hits, what’s the best first move?
A. Start fixing quietly
B. Activate the right channel/bridge and log the incident on ERMA
C. Run out to the lobby and shout "Incident"
D. Send an email to every distribution list

Activate the right channel/bridge and log the incident on ERMA

100

Failover means:
A. Failing to bring snacks
B. Falling asleep at your desk
C. Automatically or manually switching to a standby system/component when the primary fails *
D. Rolling back a deployment to the previous version

C. Automatically or manually switching to a standby system/component when the primary fails

100

A good recovery procedure is:
A. Written in invisible ink
B. Step-by-step with owners, dependencies, and required access/tools
C. High-level only
D. Only shared via carrier pigeon  

B. Step-by-step with owners, dependencies, and required access/tools

100

“Evidence” is:
A. A folder full of selfies
B. Test results, attendance/approvals, issue logs, closed actions
C. A plan exists
D. A doodle on a napkin

B. Test results, attendance/approvals, issue logs, closed actions

200

RPO is best described as:
A. Radical Pizza Organization
B. Rapid Penguin Observation
C. How fast we recover
D. Maximum acceptable data loss measured in time

D. Maximum acceptable data loss measured in time

200

The main purpose of an incident bridge/situation room is to:
A. Assign blame
B. Coordinate actions, decisions, and communications
C. Reduce transparency
D. Play Rock, Paper, Scissors as a team

B. Coordinate actions, decisions, and communications

200

Active-Active architecture is when:
A. All traffic is routed through a hamster wheel
B. Both servers are doing yoga
C. Multiple sites/instances serve traffic at the same time
D. Only one site serves traffic; another is ready but idle


C. Multiple sites/instances serve traffic at the same time

200

BIA stands for:
A. Banana Ice-cream Association
B. Business Impact Analysis
C. Baseline Integrity Assessment
D. Big Important Announcement

B. Business Impact Analysis

200

CAPA stands for:
A. Cake Appreciation Party Always
B. Corrective and Preventive Action
C. Control and Policy Approval
D. Cats And Puppies Association

B. Corrective and Preventive Action

300

RTO stands for:
A. Recovery Time Objective
B. Response Team Owner
C. Run Time Operations
D. Regional Turnover Order

A. Recovery Time Objective

300

Best stakeholder update during an incident:
A. “We’re on it”
B. “No ETA”
C. Impact + actions underway + next update time
D. Announce Incident Name + Get emotional +Share the long triage journey in a cinematic way 

C. Impact + actions underway + next update time

300

Blue-Green deployment typically means:
A. Deploying code with food coloring
B. Maintaining two environments and switching traffic between them
C. Deploying only to one region
D. Wearing blue on Mondays and green on Fridays

B. Maintaining two environments and switching traffic between them

300

A Recovery Plan is best described as:
A. A collection of cat memes
B. A step-by-step approach to restore a service/process after disruption
C. A backlog of engineering improvements
D. A secret handshake

B. A step-by-step approach to restore a service/process after disruption

300

Evidence of testing typically means:
A. A fortune cookie message
B. Artifacts showing a test was executed and outcomes/issues were captured
C. A sticky note that says “tested”
D. A screenshot of a green status on the dashboard

B. Artifacts showing a test was executed and outcomes/issues were captured

400

Blast radius refers to:
A. The distance your sneeze travels
B. The number of balloons at a party
C. The network bandwidth of a service
D. How far an outage can spread across systems/users  

D. How far an outage can spread across systems/users

400

Most common reason recovery efforts stall:
A. Too many meetings
B. Missing access/permissions or missing dependencies
C. Too many individuals to blame
D. Too many acronyms

B. Missing access/permissions or missing dependencies

400

Chaos Engineering is the practice of:
A. Letting monkeys write your code
B. Intentionally injecting failures to validate system resilience and assumptions
C. Randomly unplugging things
D. Scheduling meetings at midnight

B. Intentionally injecting failures to validate system resilience and assumptions

400

Runbook is:
A. A diary for your desk plant
B. Step-by-step operational procedures for incidents/maintenance
C. A marathon training guide
D. A list of feature requests

B. Step-by-step operational procedures for incidents/maintenance

400

What is a Single Point of Failure (SPOF)?
A. The office goldfish
B. The only person who knows the Wi-Fi password
C. A component whose failure causes the entire system to fail
D. A backup system that is crucial for recovery strategies

C. A component whose failure causes the entire system to fail

500

High availability (HA) primarily aims to:
A. Hide all the staplers
B. Make sure everyone gets a trophy
C. Prevent any security incidents
D. Minimize downtime via redundancy and fast recovery

Minimize downtime via redundancy and fast recovery

500

True/False: Every incident should have one clear incident lead/owner.
A. True
B. False

A. True

500

A Communication tree / call tree is used to:
A. Grow office plants
B. Track who brings snacks
C. Ensure the right stakeholders are notified during disruptions
D. Validate RPO

C. Ensure the right stakeholders are notified during disruptions

500

A plan is “complete” even if it doesn’t list dependencies (teams/apps/data feeds/vendors).
A. If you say “abracadabra”
B. Only if you have a magic wand
C. False
D. True

C. False

500

What is the outcome of a good tabletop/test?
A. The table flips over
B. Actions captured + owners + due dates + tracking to closure
C. Agenda+ Notes + Thankyou Email
D. Everyone gets a gold star

B. Actions captured + owners + due dates + tracking to closure

M
e
n
u