Well, good evening, everyone. Thank you for joining master
Class this evening.
On the 26th of January 2023, we have two.
Umm.
Presenters tonight.
And as soon as I can find my teams, I will go ahead and send
out my teapot.
To let everybody know that it's starting.
And Umm.
You can get more people in here.
Gather the time.
Umm.
Who do we have tonight?
I should look at the calendar, find out.
She tell anybody that I'm not prepared.
But I'm never prepared, so that's fine.
OK, Nathan.
And.
Jun.
Is that correct? Is that is that I say that correctly?
Yes. Yeah.
Yeah. Yeah. Correct. Jane. Yeah. Same like the month. Yeah.
Jim.
Good.
All right, I'll put this in here.
OK, so you have 30 minutes. Let's let's put you after
Nathan.
Yeah. OK.
Nathan, Are you ready to go?
Yes, I am.
All right, take it away.
All right.
You want me to just, like, share my screen? Is that the that the
Yes, share your screen correct.
OK.
Let's get this pulled up.
OK, sure. Here we go.
OK. Can everyone see this?
Maybe.
Yes.
OK, we're OK.
OK, so this is CompTIA network plus and security plus test
preparation and testing advice.
I did. I have gained both certifications, so I'm not just
making stuff up as I go. These these have worked for me.
Alright so.
We're just going to break down the comparison of net plus and
set plus I I use those abbreviations interchangeably
because it seems like a lot of people kind of have it backwards
as far as.
Taking security plus first, I don't recommend that at all. I
recommend taking network plus first for a couple of reasons.
One, it's going the I'm not gonna go over all of the the
details on on what exactly each covers. Just know that network
plus is primarily based for network essentials. Security
plus is for security skills. Both have 90 question maximums
and those are composed of multiple choice and performance
based.
The multiple choice isn't for choices, it's five, so you have
less than 25% chance of guessing if if that is a strategy.
The.
And then the performance base, those can be.
Umm, a lot of different things. Some of those are lab
simulations. Some of those are placing different topographical
items and certain networking areas. There's a lot of
different variation there, so it really can be a lot of different
things.
For the network. Plus, you're gonna be scoring at least a 720
out of a 100 through 900 scale.
There is a 90 minute time limit. This is something that I'm gonna
talk about a little bit later, cause that that's a big part of
the test that a lot of people underestimate. The test voucher
is $358 and then it renews. You need to renew it every three
years through continuing education and annual fees. So
just comparing quick here, same 90 question, Max, same multiple
choice and performance based questions and then the score
here a little bit higher at 7:50 on that same one.
100 through 900 scale.
The 90 minute time limit is still in effect and this one is
a little more expensive. 392 for the test voucher still renew
every three years through continuing education and fees.
Now here's the here's the thing about security plus, and here's
why I say.
Do it after network pluses because it stacks on top of
network plus and I'll show you what I mean so.
This is and I grabbed this directly from Comptia's website.
This is roughly the progression that you could follow if you
wanted to with their certifications. So at the bottom
you got CompTIA data plus and an A plus.
Network security and then it it ramps up from there and this is
actually if you go to their website, this is an interactive
you can interact with this graphic. So if you click on
these bars, it'll tell you what stacks with what. So some of
these don't actually stack with other ones. In general, though,
they do stack like this.
So what I mean is, if you do network plus.
And then a year later, you do security. Plus you don't have to
renew network plus.
It renews at the same time that you renew security plus. So for
for me, I still have to pay the renewal fees, but I only have to
prove continuing education for security plus not network plus
and I didn't have to renew network plus.
What early? Because I passed security plus afterwards, so
network became like it. It falls under security. So. So the
network renewal date is the security renewal date if that
makes sense.
And then you know you can you can advance beyond that. So if I
wanted to, I could try for the like the pen test or the the CYA
and those would renew security plus and in turn network plus as
well. I know that A+ falls under network plus. So if I wanted to
get a plus at this point, it would fall under there, but it
wouldn't if I got a plus now it wouldn't renew network or
security.
OK, so the actual test prep.
I say this in bold because this is the most critical thing that
I, in my opinion that I think anyone preparing for either of
these exams can do. Professor Messer, this guy is phenomenal.
He's the best resource I have found for both tests. He covers
both and he covers a + 2. It looks like so he's got free
YouTube videos and those breakdown basically every single
objective on.
Both tests he has a video for pretty much every single
objective, and then he also you can get study notes from him and
the exam hacks, ebooks, those are nice too. This is what
really is gonna help with security plus the practice exams
cause CompTIA.
Has a very specific way of phrasing questions. It isn't
what question is the most or which it's not. Which question
is correct? It's which question is or which answer is most
correct.
So multiple answers could work, but you have to figure out which
one is best and the security practice exams.
Very closely modeled that the wording and the style that
CompTIA uses, and he also will explain the reasoning why. And
that's that's a big part of of why these are so great is
because you need to know the explanation. You need to
understand the rationality and the mindset that CompTIA is
using when when drafting these questions.
So understanding the format you're getting the explanations
and then while you're doing these, one thing that I think
really helps is if you time yourself to do it, give yourself
90 minutes or.
You know, if you don't want to do that, you can just time
yourself and just see how long it takes you to complete these
practice exams. And I think if you buy these, you get at least
three or four of them. So I did when I was doing when I was
practicing for mine, I ran through him twice.
I did one in one a night cause I'd go to. I'd go to class and
study and I know that not everyone can go can go do that
at a class and study for those exec precisely. But so every
night I would do one exam, I would tie myself to see how long
it would take because most people don't study under a time
limit and they get in the test. They freak out because.
Oh gosh, I don't know how long I'm taking. I don't know my
pace. You know, these 90 minutes are gonna kick by. Well, if you
time yourself, you practice timing yourself, you're gonna
know how quickly you can get through questions. You're gonna
have a much better understanding of.
Of of how much time you have left, so you don't you don't
worry about that.
OK. Other than Professor Messer.
Exam compass there are website use Google and quick and you
will find them. They do practice quizzes, they do not have the
format that I like as far as they're not very similar to
CompTIA. They do. They do well, they do well, but they're not
perfect. There are a lot of them. They've got them for net
plus and set plus.
Other than that, port and protocol flash cards is you just
make these on some index cards, port number on one side,
protocol on the other. You've got to know him, especially for
network plus, especially security. Plus you should. I
mean, if you're doing, if you're doing network plus first, then
you should know them for security plus. But you're still
need to know them for security plus.
Heavily important in network plus.
And then other than that, if you want, you can go to the actual
CompTIA website. They've got official study guides, online
learning environments, so this might be a little hard to see.
There's just a breakdown of what they offer. So you just get the
exam voucher, you get the exam, retake the ebook. This is a
practice assert master practice for security. Plus that looked
like a study guide. And then these are the labs.
So you can get a couple of different things in varying
price range. Sometimes these things go on sale. So if you're
interested, you know, keep an eye out. Sometimes they might be
on sale.
And that is the end of my slides I guess.
The only other thing that I can say.
Is that?
Network Plus is going to prepare you for security plus because
it's going to provide a foundation.
That is going to help you with security plus the other way if
you did it the other way around. Looking back on it, I don't
think you'd be as successful. I'm sure you could do it, but in
my opinion, network plus should come first. It's meant to be
that way. It's it is technically easier. CompTIA has kind of
mentioned it has. It is easier.
And if they're stackable, Certs have shown anything, I would say
that that's probably the intention.
Does anyone have any questions?
Oh gosh, how do I get out of here? OK.
Excellent job.
That was really good for a lot of people to know, and that's a
good way of knowing how to do the other CompTIA tests exams.
You might want to do too, because.
Pretty much all the same I think.
UM.
Oh, it looks like Bart asked. How long did I study for both
tests? OK, so.
Yeah, full disclaimer, I got both of mine done.
While I was in the military, So what? What the situation was, I
would go to a week long course Monday through. Well, actually
it was a two week course. Sorry. Two week course. So two full
weeks we would test on that.
Friday, though, so really it was nine days of studying.
And that was that was eight hours a day.
So I get that not everyone can go disappear for two weeks. I
get that.
But.
I would still say that a lot of this stuff can definitely apply,
you just might have to, you know, take a little bit longer
time, especially if you're, you know, having a full time job.
What I will say is I pretty much walked into netplus with very
little experience.
And I just studied really hard for net plus for those two
weeks. So the material can be learned, it can be learned
quickly.
And then security plus basically just dedicated those two weeks
as well to studying and and pass that one I I got them both in my
first try. They aren't as hard as you think if you're good at
taking tests and.
You stick and you and you learn the format the the format of the
questions is huge. That's what I would say.
OK. What other questions?
There's a discount from the product can be applied to study
materials. That is a good question. I do not know. I got
all of my stuff through the military so.
I am not sure. I think Purdue does offer something, but I
would have to double check on that.
Yeah, it it doesn't for anything else. The voucher is only for
the exam itself.
All right. Any. Any other questions?
Like that's it.
And it's a good point that you said too, if you're good at
testing.
Yes, yes. Ohh and and ohh gosh, I'm gonna butcher this name. Is
Because I'm not.
it common?
I hope I said that right.
8 Plus great place to start.
Umm, because, especially if you're not familiar with the
hardware.
I think sometimes a post gets a bad rap for being too easy. I
don't think so. Think if you have a good understanding that
hardware that's gonna definitely help you out and it'll stack
under network plus. So you're helping yourself out in the long
run.
Great.
Did you use Professor Messer or did you have the CompTIA
Learning bundle along with Professor Messer videos?
I did not use the CompTIA Learning bundle, that's just
something that I know some fellow Marines were using. I did
not pay for that.
I just used primarily Professor Messer and unfortunately he
doesn't have network plus exam like practice exams, just
security plus.
But Professor Messer is primarily what I used.
Any other questions?
OK. Well, thank you very much, Nathan. You did great.
Thank you.
Would you be able to go over a question?
Oh, like a practice a question.
Uh, yeah, let me let me pull it up.
I think I still have some of that.
Let me double check my files.
Uh.
It is OK pulling it up here.
OK, we'll share again here.
That's a good point coming. Yeah, you've made does have a
lot of good tutorials.
Right. Totally. Get up here.
OK, there we go.
Alright. Can everyone see this?
Yes.
OK. Yep. So these are some practice exams, we'll.
Scroll down to some of these OK? So ohh gosh.
Yep. So these are actually some perfect examples of some labs.
So in this case.
You're just matching. You got this. You know these these
blanks here like these. These word banks, and then you just
have to put them.
I don't know if everyone can see that you just have to attach
them, so like attacker obtains a bank account number calling the
victim. OK, well, that's that's vishing, right? So you just we
just move that to the.
To that, that blank and you just basically sort them out that one
of the easier ones.
This is another another one. So you got these and you would just
drag them in there in the in the environment. So you just have to
figure out which security controls would be useful for
which location.
Umm.
Is that how the actual test is?
Yep, Yep. These are very similar. These are very similar,
so like this one here. You'd have kind of like a almost like
a packet tracer environment.
Umm. And then you have to figure out.
Some different things like yeah, configure the following stateful
firewall rules so you have to you have to fill this stuff in
with source IP destination. The protocol TCP versus UDP port
numbers. See that's where I was talking about port numbers and
then allowing and blocking.
So.
Yep. So they they really can range a lot as far as what
you're gonna have to do. But some of these, you know, fill in
the blanks or drag and drop or in this case you're writing
rules, stuff like that. You can definitely show up. OK.
So some of these have four question or 4 answer. Some of
these have five or even 6.
Right. So like, let's see.
Uh, you've hired a third party to get. Ohh actually, let's move
down to the answers cause I should.
Yeah. OK, perfect. OK. So we got this is this is the answer key.
Alright, so we got a question. OK Richard the engineer.
Blah blah blah. Not yet released company product on an online
forum. Richard believe the forum was limited to small group.
Which pictures are actually posted to a publicly accessible
area of the site, which is the following company policy should
be discussed with Richard. OK.
Personal e-mail, unauthorized software, social media
certificate issues. OK well, the correct answer is social media,
because he's on an online forum, right? So.
And they'll explain it. And Professor Messer does a great
job explaining, right. So most organizations form policies on
managing social media engagements.
You know, not disclosing information to the public, OK.
Now he'll also explain the incorrect answers.
The personal emails, not it because this was.
Dealing with online forum, there was no personal e-mail involved.
Unauthorized software? Well, he didn't really have any
unauthorized software certificate issues.
You know, he'll even say possibly how this could be
correct, but it's not a web server certification issue would
commonly cause problems with encryption between a client and
a web server. This question doesn't include any certificate
areas errors, so he's even telling you hey certificate
issues deal with this other thing. So file that away in your
head, you might need that later, but this is not the right
answer. So I think just the in depth view of these is great.
And yeah, a lot of these have big text boxes. Read the very
last sentence before you hit the rest of it. No one cares if
Richard is a System Administrator at a startup
company. OK, all you need to know is he's being attacked by a
phishing campaign, right? So a lot of these will have a big,
big old block of text if you need it, read it.
Focused on that last sentence.
Does this does this? Does this help? Does this answer your
question?
Yeah, David said. This is huge. Yeah, that helped. We're
OK, good.
studying for Certs. I found that I learned more from the
questions. I missed the ones I got correct because of the
explanations.
Hmm. Yeah, sometimes.
Oh yeah, yeah, definitely.
Yeah, I I learned that. Like for me, I gotta do questions. I I
basically only learn through questions. If if you make me
read a textbook, I'm gonna fall asleep. So I didn't even bother.
Exactly.
I don't even bother with an ebook for security. Plus,
because the only thing I would use a security plus textbook for
is if I needed to look up a very specific topic.
Because I just wasn't getting it through the questions I was
like, hey, I keep seeing this phrase or this word. I don't
know what it is. Let me look it up quick. So I was really just
using it for a dictionary. I wasn't using it as a study guide
or study material really at all.
Yeah, that was great. It was good to see, you know, the exam
itself, because it was actually different from.
For me to teach the course, I had to take the exam. I had to
get the certification and it's really different depending on
the cert that you're getting.
Oh, yeah, very true. Yeah. And. And the CompTIA will update
their versions every, I would say, even every year, every
year, every two years, they're updating to a new version. So
Yeah.
this the stuff I have is technically out of date. I'd
say, you know, most of it's good enough if you're a version or
two behind, you're probably fine. But.
Anything 2 versions behind, I would try to get something a
little more recent David which Professor Messer bundle would
you suggest?
Umm.
Anything with the study guides do help. I don't actually know
if I have a study guide. I I use them.
They're decent.
The exam is better, but I know that that doesn't help you for
net plus.
So I would say if you want the study guide, go for it. A lot of
his stuff you can just get online on YouTube for free. The
videos, those are those are pretty big.
Umm.
But yeah, for for second plus definitely get the the exam.
And the other thing the the one of the greatest things that just
happened recently, too, is CompTIA just bought test out.
Umm, the guy for test that he's been doing it for something like
OK.
30 years or something like that and decided to go ahead and sell
it. He's still a part of it and they're still making the videos
and doing the training and stuff like they do. But now if you do
a test out, it's gonna really follow with CompTIA, which test
outs always been the best. I did test out to get my certification
and if if it wasn't for that. And of course, there's
wikiversity that has that too, which you can go to and get some
information from that too. But you never know how updated that
is. Right. So.
Although it's supposed to be.
That's always really great with. Test out and I think the
school's gonna start using that more too.
Within the training for the classes that you're going to
take to.
But one last bit of advice as well. I just thought of this.
If you're getting a voucher.
You might be able to find a great deal on one somewhere.
But I know people that bought them that were not good, like
they were fake or they were already used so.
I personally buy only directly from CompTIA. Is it more
expensive? Maybe, but I know it's gonna be good, so just be.
Just be careful out there.
Yeah.
Yeah, the voucher from from that you get here through the school
works great and go straight to CompTIA with it. They even have
a link for you when you do it. So you should be able to use
that and it should be problem because I know that mine was
normally.
Umm.
I think it was normally 160 bucks now only paid $80.00 for
it or something like that.
And that was normally 120 bucks and I paid. I paid $60.00 for
it.
Oh, very nice.
Yeah, it's 50% off. I think is what we have for CompTIA.
As a student.
Alright, well there you go. Through a Purdue, Purdue then
because yeah, I know some people bought them off Amazon or
whatever and yeah, they they.
Yeah, I wouldn't trust outside of that, right. And O'Reilly
No, I wouldn't do that.
books, I tell you, O'Reilly books are awesome. That's how I
learned my HTML years and years and years ago. So O'Reilly book.
It's probably one of the first books that came out for each
e-mail I was O'Reilly.
There.
Do we have to use the school one while we are still a student or
do they do an alumni version?
I don't know about alumni. I think you still have to be a
student to use it.
I think, but once you get it, I think I don't know if it
expires.
Oh, you're you're you're certifications. Ohh the voucher.
The voucher.
I don't know. I don't know about the voucher.
Yeah. So I would check with that and you can just reach out to to
For those.
Tina, the information is in your bright space for that.
For those that are curious, there is no scripting knowledge.
You don't need to know anything about programming or scripting
for either of those. I have very limited knowledge on that and I
passed them just fine, so no, no worries there.
Just shell right for networking.
Uh, yeah, yeah. I mean command line I guess.
If shell or command line but no, I mean you're not. You're not.
Right, yeah.
You don't even know Python or anything like that.
Awesome.
Thank you, Michael. OK, so you get it from the 12 months from
when you valid from 12 months from the day you receive it, OK,
even though one from the school then it has to be right?
OK.
Good. Alright. So let's see, we got 1/2 hour. Let's give that to
June.
OK then.
We are already anymore questions, but I think.
Pretty good. You can reach out to him on the group chat if you
want to. If you have any more questions.
Then we can let June have the other half hour. Awesome.
OK.
Disaster recovery plan. Ohhh my gosh.
OK, so you can see the screen, right?
That there's Nate. He would love this. This is so right down
Nate's alley.
Alright, take it away.
Yeah.
Since every way they're interesting, the in the OR
certification part, maybe next math class I need to prepare a
work for the cloud certification.
OK, then so this the this topic is about the disaster recovery
in the cloud in action.
To our color, some concepts, DRP concept and then how to plan the
deploy.
Later. Yeah, this is about the team team separation. What kind
of team need to be involved in the Dr?
Then it's the technical part how to set up an Azure site recovery
test, fail over, and then there's a failback also. Yeah,
the network part, we still need the network support. Then there
are some experience to share about the real world practice.
Later I will have a demo with the actual.
OK so here is the about the Dr concept. I I just see the RTO
which is a pop in the in the question. Let's see. Yeah, so
here is a more explanation on this. I try to find a a
something more official definition for this. So this is
from Microsoft.
Recovery time. It is one of the.
And I I put to the world when appear in that you. Yeah. So
IRTO is the recovery time so how how long your business can
survive when the system is done. So this way you should get it
from business and.
They were negotiating with you to get a shortest recovery time.
How you can recover the system and up PO is a another concept
which this one is about.
Ah, what kind of day to lose? You can accept the usually.
Yeah, we will have like everyday backup. But for some database we
may need to have a shorter like 12 hours, 4 hours or even in the
real time. So in when the disaster happened, there's
usually some some data loose. We cannot say we we can guarantee
00 date lose. This is what you need to.
Be careful on that.
Uh, so another thing is about the off site. I think everyone
know the importance of about the backup for all your data or even
your personal data. So yeah, the the off-site is another thing
about the backup you need to bring the backup to another
place instead of staying in the same data center or server room.
So traditional.
That cop is using the tape, the window tape library. It's a kind
of older technology, but still the most used for the backup
and.
The the most of the bigger benefit is that it can have a
very huge space. I remember for LTO eight, it's a it's a type of
the tape. It's AA12. Terabytes in in 1 take.
So you can have a such a huge chip backup media for all
holding all your backups and then the tape should be
transferred to another safe place.
Right.
Uh, it stand clips there, not in the same building when come to
the cloud. It's the similar concept that you will have the
all the servers, the application database backup on the disk due
to disk due to tape library. Then transfer to the cloud
storage. Cloud storage can guarantee the similar things.
They will distribute all your backup in different region
different place.
Then when the site, the certain whatever cloud site or or your
server room got easy, you can restore them from the cloud. The
outside is really important for the disaster recovery.
Here I I give an example which yeah it's based on my
experience.
Yeah, actually, my my wife several months ago, my wife
laptop got crashed and it's due to the hard disk failure.
Luckily I I have the.
The backup media which I use mobile disk to the backup
computer and every weekend on Sunday.
Uh, so yeah, if her her laptop crashed, then what's the
recovery point here?
It's that my last weekend backup then?
Ohd I spend one day because I don't have spare hard disk, so I
purchased one from Amazon and they deliver next day. Then I
installed on my wife laptop and restore the all the data.
So what's the recovery time?
And then here the recovery time is a one one day because I need
one day to get to the spare parts and rebuild the system.
OK, so this is about RTO and RPO.
That next next is about the.
Uh planning deployment.
OK.
So this one, uh, there's very good document you can use which
is from at least 834. It's about the contingency plan guide. Then
I although it's almost 13 years ago, but this one is a really
good it include all kind of information you need. So here
let's see basically split to part one is the planning.
And the other is the about the deployment.
In in the planning, there's a contingency plan policy and
there's SBIT a business impact analyze. So using the BI, you
should study what kind of business process you need to
recover and then the resource you required and the give the
priority for the system.
Uh, because although we will have a lot of system, but they
may not all relate with the critical business operation
though in the DRP we should define what kind of system we
need to recover and what what the what the priority for each
suspended.
Uh. Then with the BI we consider to put some preventive controls
to to try to minimize the disaster effect or the see
whether we can make it not happen.
Then it's about the contingency. So here there's backup recovery,
offsite storage and yeah, alternative sites in the. This
is the before you without cloud, we must to have a second date
center.
Second date Center for us and then put to the hardware or the
spare parts inside but with the cloud now everything can be
ready on the cloud. This is a really good benefit from the
cloud.
And the yeah to consider the spare parts cost, then define
the team and role responsibilities. Here we see
that the another part which is the training, testing and
exercise. This is also important because once you have the whole
Dr Plan, if you you don't really put it in test, don't really
have a A have a test plan and make it happen.
When you're late you, you will not not know whether this is
really work or not. So such kind of things we need to plan well,
if you are cybersecurity audit and you may need to take notes
on this basically should be at least once a year.
People should test their disaster recovery plan and then
it's about how to maintain the the plan because every year
there may be some new system coming. For example, yeah. In
PGIP Tech, we have a good new project in progress. Then next
year you should include those two new system in the in the
disaster recovery plan.
So this one should be maintained.
OK, next is about the deployment. Basically there are
three two major phase and then plus some documentation for the
support information and appendix.
So the three phases, the first one is the activation and the
notification.
In this phase we we should have a a criteria to to define when
why all we need to activate the young, and once we agree, we
need to launch the Dr. Then there should be a notification
process now and you follow such kind of profess to inform
everyone who is involved and also the technical part.
We need to assess over the outage.
Uh, how the damage in to our system and think about how to
recover.
Then in the recovery phase and the sequence of actions we need
to do and follow the recovery procedure. Then for recovery
also need to do some escalation and the notification during this
kind of period. Otherwise people they they may scary what kind of
things happen and what's the progress like. Yeah, for the
teams we know we know the teams issue it's actually a wider.
I have very wide impact for all the Microsoft service, so they
they give update every hour and let us know the progress.
And the final one is a reconstitution. If the disaster
will pass, then the the things that are recovered then you may
need to consider to to rollback everything to the original data
center. So in this case we will need to have a concurrent
processing for both system and also validate the value to the
system in both side. Then finally we deactivate.
Dr Site will back to the original data center.
Yeah. So this is the about the planning and the deployment.
OK, here comes the teams and the Rose responsibility.
So this one is actually not only for IT. We need to involve
business team and also auditors.
The is thinking PGIP tech. We have all this team tips after
developer that you are almost like the application team and
then we have some key users and then for cyber security you may
play the auditor roles. You need to think about the DRP and you
need to find out whether we are really doing according to
procedure or those kind of things. So in the Dr.
And 1st we need to have a someone to coordinate or as a Dr
managing. So this one should be come from IT department and he
or she will need to manage all the recovery process, manage the
communication to the senior management team and also the IT
and the business crisis team. So this one will be the spoke
single point of contact for the whole DP.
And then IT team basically it's like a PGIP IT support team
there. The rules like is to determine the disaster situation
and how is the data center. Then we rebuild the order when then
server cloud and then restore the system and the data. So
application team and it's a basically the business analyst
or like software developer.
You will be more close to application so you you need to
determine the impact on the application and then communicate
with key user from business. For this kind of impact work with
them to prioritize the recovery order and then verify the final
recover the system and the data.
He user is the most from benis they they are like people in
Venice, usually the department leader or someone know IT. They
will be working more closely to IT for such kind of incident
analyzed the impact and the other final user acceptance.
They need to confirm everything was recovered and that they they
give a go to use the the outside.
10 uh senior management team will be involved for any
decision. We need to make during the DRP.
So this is a typical uh disaster recovery team and the role and
there are also more team and the role design, some maybe more
details than maybe more simpler which you can refer from the
list 864 this document.
It's kind of here is about the actual site recovery.
But this is a really very useful tool in a before Microsoft
released called Azure Migrate. This one can also be used to
migrate to the future machine to the cloud.
So it can can do the actual to actual.
Ohh.
The replication and also it can do from VM Ware, Hyper-V or even
physical physical server replicate to Azure.
So in Ashley, it's quite simple. It's almost like one Click to
go, uh. Later in my demo you will see it.
And then in the VM website, if you have a VM Ware host you need
to install a new VM called the Configuration Server in the VM
Ware host. Then it will connect to Ashley with the public link.
OK, this one is a very interesting. So you need to open
the HTTPS to Azure cloud then they will replicate your VM
through Internet.
Ohh though some company in like like like company we have the
Express route which is the private link by Microsoft only
support to replicate VM from Internet but they can guarantee
the security. Your DM will not be captured by by someone else.
Same for the Hyper V for Hyper V the package EXE file to be
installed then it can be replicated to the S recovery
service point the service work and then build the VM images.
Another concept is about the peer, the region this one is.
Umm, about Microsoft, they should regions they have the
different region around the world and they also have a
several zones. Actually it's they sent us in each location
each region.
Before I remember two or three, three, two, or three years ago,
Microsoft only allowed you replicate your VM between peer
the region, but now they open the limit so you you can
replicate for example Yum. In the US you can replicate to
Asia.
But still they suggested you use appeared region because this is
a best recovery sequence. Technology updates means the the
two region they have the same technology stuck with the
Microsoft yeah software version. All those things the cloud
actually still have there and the layer of software and
physical isolation there are more than 300 miles then it's a.
Follow the regulation requirement for the tags or
something.
OK, so this is a screenshot and let's see first before. Yeah,
just the on the screenshot and for the demo. So disaster
recovery, there are several ways to use the Azure site recovery.
One is just to go directly to the VPN and you will finding
operations manual. That's a disaster recovery. You can click
it and then you you replicate another region.
Choose the region.
Now there's options, but it's quite simple. Basically, always
create a new resource group. They will add a slash ASR in the
new resource group. Then the future network create a new
virtual network in another region the same, and then
there's some additional settings. For example, you can
select the extension or user account.
Or storage.
That. Remember? Yeah. If you are in an organization.
Umm, the as you said to recovery needed permission from AAD, so I
use the PGIP tech to create a trial account, but unfortunately
I don't have permission for the SAD to create the service
principle so it got failed. So later I I use my personal
account and register trial as soon subscription and and do
this kind of demo.
OK.
So if everything working well, uh, you will see.
Yeah, the notification you will see all those things complete
successfully and in your VPN disaster recovery part you will
find.
You're the end will be cached to a local storage account, then
sent to another region.
And the good thing is that if you use, I should say to
recover, you don't need to pay for the full VM in another
region. I tell you, just need to pay the disc because the your
your VPN, it will be only replicate your disk your data to
there, but you you were not, you don't need the VM to be up
unless you want to do a test or really the disaster happened. So
the cost is.
Less than you have another data center. Everything running
there. Yeah, so.
This is about the VM replication and you will have a video.
Yeah, you will see how it replicated.
So this is the log it if you you create a site recovery job you
you can dig the log you find where the status whether
everything will complete successfully.
Here maybe another concept I need to say. It's about the
retention policy.
Retention policy, which this one basically by default it's 24
hours.
3:50 hours and now Microsoft allow a 15 days.
Because of more and more cybersecurity attack ransomware
attack those things.
And.
Here is about.
OK.
But then any question or?
No.
No, I don't have any questions. Anybody else?
OK, because I don't know when speaking. Yeah, there's some.
OK, let me continue on that. And yeah, later we see the demo and
that there will be a Q&A.
So once you have the Dr the disaster recovery, everything
ready, there are several procedures to be followed. So
with the VPN you will have different options. Actually
there are too many options. If you see it in in the first time,
you will be confused. In general, Microsoft provide a
very good function which is the testing.
You you can test the failover then they will restore your VM,
recover your VM and in a isolate involvement you test it and
confirm everything working well. Then you can just simply clean
up the test failover and then the VM will be back to the
protected mode. So it's a simple way to do the Dr testing. Then
in the real Dr.
To fail over faith.
You need to click failover and then the VM will be ready for
use and the commit is to the final stand. Once you commit it,
the VM will become ready to use and you can release to end the
user. When the DRI is a done and your original data center is
recovered, you can think about to fall back.
Basically it's to reprotect the the yen and the the to go to the
protected the boat.
There are certain, uh recovered point and the good thing is it's
almost like a 5 minutes they choose.
In it, if the network is good, you choose the pair. The region
Microsoft can guarantee such kind of recovery point.
So every five minute there are crash consistent and application
consistent. If your application have multiple servers, you can
create a recovery group and it will be a more thing precisely
forecast on the on the consistent level. But usually if
you you you have a single server or you are sure there's no data
synchronized between each server.
So you you just the recovery to the crash consistent point, this
is the minimal big lose.
OK, now it's about network part. So for network part, although we
we have the cloud, but we still need to connect to the cloud, to
the company. So yeah, usually in in some big company and they
they were not comfortable to use.
A public cloud they still want to use a create. For example the
DMZ. The land in the cloud and the connect with the internal
network.
So I a normal practice is to use express route. This is like a
lease line to Microsoft to assume and usually there will be
a data center provider like equal Unix. Equinix is quite
famous for for the data center hosting and they provide the
Express route hosting the network in their data center.
Then the primary data center. The SU region will be connected.
Two days Express route to a data center, then to the companies
and PR's cloud and the Disaster recovery site. Usually it's a
VPN connect to data center. Better to be another data center
because sometimes the data center may also go to user, so
you should choose another region, another data center and
connect them.
If, if there's enough budget, you can also link it with
Express route by Express. Route is the really expensive.
Uh, the good thing in recent age is that now we know the SDN.
Steven is a is more and more popular and a lot of companies
start to deploy the.
You went the good thing for us. The weather. You don't need a
really data center anymore. You you can just insert a MVA, which
is the network which applies to the cloud, to the ashram and the
Microsoft support, right? Yeah. So many vendors like like the
Baroque CUDA fiscal VM, Ware, Fortigate, Aruba, all those
vendors. You're just needed NBA. It's actually.
A class to. Then you can connect to Azure Cloud and with your
network.
So this is a really, really good thing, because inside the data
center you still need to have telecom router. For example you
put AT&T router virus and router the hardware there. And
if the hardware got problem you will lose the the connection. So
although your network is good although Azure is good but you
cannot go through the the data center and the experts route
that stage but with.
For the eight to become more simple and it's a classified NBA
differ. There's something really happened. You can easily create
another one or you fail to another region.
Pick and.
Yeah, this is about the the real world. So first is the DRP, DRP
is the business requirement. It's not a hard thing. It's not
a, IT should work it along because the yeah, usually if the
business is strong and the IT department is a little weak.
They will see you. Yeah. I teach you like electricity. You should
be 24 hours. No. Down time 0 until zero IPO. No data lose.
But yeah, actually it's not like this.
So we we need to work together with business for the for build
at the IP, then another concept is about the BCP. So BCP is the
business continuity plan. This one should be failed in the
business side and the they they are the person they are the the
department responsible for this while the DRP is in the IT. So
we need to work together to one side that they have the BCP
another side we have the DRP.
By trying to find some official definition which is here.
So the BCP is the focus on maintain the business operation
with the reduced or restrict the infrastructure capability or
resource the basically yeah they they should have such kind of
mindset that if IT got easier they should run this on a menu
menu way or reduce the capacity. For example, yeah, if they have
some delivery they need to write on team paper or Excel.
If it's like a restaurant, the waiter waitress, they need to
write down your order in the paper and they pass to the
kitchen to make the food. If the the other system will be done,
this part is business. They need to keep this in mind and the DRP
is that this problem of developer plan to recover
operation as quickly as possible when face are decided. So it's
more about the IT infrastructure, how fast you can
recovery.
For a minute and a minimal today to lose, so basically to build a
secondary, the third set of data center or the hardware to
recover the system and the data for business.
This is about PGIP and PGIP. Next is about the cost.
When's thing? I I'm not too comfortable with cloud is if you
want to manage a budget with cloud, it's very complicated.
That's why, you know, recently there's a concept called fine
OPS. It's about how to manage the cost in the cloud side.
There's also new position, new new skills to learn. Microsoft,
they they put it just a very simple words for the Azure site
to recovery they say.
The cost is 16 per month for the license. If you replicate from
your data center Azure and it's the $25 per month actually to
action, but the consider the TCU total cost of ownership. You
need to put the storage cost based on the VM size you need to
consider if you want to test or you you have a real disaster you
bring up the VPN, how much it cost.
Or per month or per week. And you also need to consider
additional data center and when cost for the connection. Then
final part is about the people cost that you need to have the
project mandate and the annual test and maintenance or how
many, many days hours you will need to spend on this DRP.
The final thing is, uh and the DRP scope, and the requirement
is based on the business impact analyzed. So yeah, such kind of
solution should be suitable and with affordable budget for the
business.
They need to consider this.
The.
Cost is a suitable for the business. It's like the
insurance for for a person business by this kind of
insurance to ensure they can continue the the business during
during a disaster.
Basically, yeah, based on my experience is like some
countries, Japan, Indonesia, they they really face disaster.
They know such kind of things could happen. It's more easy to
let than to buying the solution. But for some other countries if
yeah, they all they are safe they will have less chance to to
buy in a a disaster recovery. So it's also based.
But truly everything is based on the business requirement. It's
not just a technical consideration.
Yeah, next about the demo, I think, yeah, we have this time.
So I wish you about that.
Yeah, here is the actual portal I use my personal account.
And you will see.
OK, here is about the.
Yeah.
Go to every VM you that's the this after recovery section.
Good.
Can you see my screen?
Yes.
Yep.
OK. Yeah, that this is I already configured, you can see the some
logs there and it's in a good.
Boat healthy, protected. And then we can go here at Microsoft
where she this one is from Hong Kong to Singapore. If yeah. Cash
storage disk and you have a visible screen here.
OK, there's several options there by test and we can find in
the last recovery point.
The the good thing is even you created in the beginning, you
can still change a lot of configuration. For example the
the size. If you think it's too expensive then you can edit and
change it to a smaller size.
And the way you recover the the outside and the same for the
network, you can change all the network configuration, the
public IP to be assigned or the things for for a real Dr
actually here is the one thing.
The software development team, please don't code IP address in
the in the program because if you put your IP address in
there.
He he got program. Then when we restore the VPN to maybe a
different IP then people need to spend a lot of time to discover,
to find out the the configuration and the change it
you did the the suggestion is try to put a DNS name inside of
the application so when when failover we just to switch the
DNS name and switch the IP in the DNS name to another one.
So private IP, public IP, everything can be configured and
then you can also see the see the disk.
Ohh then.
Yeah. For example here I can do a demo in the test over.
So from one region to another region and the selected the
network.
Ohh, you hear? We were quite another period.
Ohh be met there.
Good.
Just the one click for the configuration. It's the same.
Also one click and put all the information then it can be done
and you can go to the.
Like to test to fail over to update you for this information,
it's just a several minutes.
Then you can have a hand this done.
OK Ohh think I forgot to choose the choose the.
Or the the recovery point. Yeah, that that you can also choose a
recovery point where you restore, restore, where you
recover it to another region. This is a extremely helpful if
you got the ransomware attack, you find all the files are
equipped. So when you recover it, you can choose a different
different restore point and everything will be back before
the before that time.
For the bad things happen.
OK, so here is about.
Still test fail, but that's back to the resource.
Right now I only have 1:00 PM.
But soon they will create another new begin. Yeah, this is
the VPN IP. Other things go to VPN thing.
Yeah. Now I just have one will actually be in and once this is
done, you will find that you have another VM is up,
everything is the same as you recovered.
Then you can log in to test.
Yeah. Here. Yeah, I I'm not sure whether I can log into the.
Busted. Yeah. Later. We can see that today. Information.
Yeah, because everything costs money, he added. PK connect, but
with passion. This is additional additional cost.
Yeah. Certain. General it's a work created a second of the
year after everything is done you. The same disk replicated to
the another region. You can find the the location here.
API quickly.
OK, create a new year thing.
Can see.
Yeah, everything successful test for all but.
OK, then you can see there's new uh VM created in another
location and the based on the same image. Yeah, but it will
not configure public IP because it's just a test. So you can you
can connect with Azure Bastion remotely and yeah basic tech
basic thing is can check the screenshot.
Stop.
No.
About the phone.
Thank you. Thank.
Yeah. If you go to the, go to the status, so you will see this
VM is up and running.
Just the test. No public IP address, not like other
production one.
OK.
So another way to check the status, check the disaster
recovery status that go to the recovery service point so you
can find it here as well for your replicated item.
Yeah. So you when you click you, you will see the same screen
you're like we just tissue.
Uh, so once the test is done, you can clean up and it will be
back to the protected mode.
Yeah. Here. It's like a sign off. You can form test is done
and it will be updating the log.
Danny two will be back to that replicated mode.
Protected mode.
OK.
And yeah, the good thing is that here Microsoft. Now they allow
15 days to this. This should be more than enough unless it
really, really someone didn't find anything up normal. It's
like a logic bomb for the rest. Somewhere usually. Yeah. Within
the 15 days you you can get back your your data in the and the
point.
Uh, yeah, basically the five minutes for the first two hours.
And after I think I remember it's hourly. Yeah, you have
hourly you have snapshot.
But I remember you need to create a new replication policy
and put the date there. Put the dates there because the yeah,
the storage will cost extra money, so by default it's 24
hours. If you want to it's 10 to 15 days you need to put it here.
And yeah, some reference in that in that year. So you can do the
further from from those documentations.
OK. Yeah. So yeah, is that the question since?
Do you want to know more about?
Was that?
No, I don't have any questions. But that was interesting. Thank
you.
Like Marjorie said, I bet you and Nate would have a lot to
talk about.
Ohh Noah says that he asked a couple.
Umm.
I guess do you wanna ask them now, Noah?
My passion.
Umm yeah.
Yeah. Bastion. Ashley bastion.
Sure.
Yeah, it's a.
Our our DRP is typically part of the like the cybersecurity
framework or is it you know as like a part of the cybersecurity
framework or is it a completely separate document that would be
defined elsewhere?
Uh, DCIP. Usually, it should be a separate one, but it's a yeah.
Also under the cybersecurity scope, because it, if you want
to be an auditor, you you need to put this in your scope and
the backup recovery, all those things in in the cybersecurity
side. But it's a joint effort from from everyone from the in,
in my company, we call the business solution team.
And basically they they are the application team and the
infrastructure team and so and include the business and audit.
Sometimes I try to use audit smartly because the audit
usually are separate department. So you can get them to to let
the business know the the importance of the of DRP. Then
you can get the budget to do that. Yeah.
Sure.
As them and then uh, just another quick one, I was
wondering if you chose Azure.
To do the presentation because it's something you have a lot of
experience with. Or do you think it's a better option for data
recovery compared to the other platforms?
Uh, because, yeah, actually is my my real world experience. I
deployed this. So for Japan, the Oceania and then now we are
going to.
Deployed for Southeast Asia, but like what I say, they they don't
have such kind of mindset for the disaster. So they they
don't, they don't give us budget.
Sure.
Yeah.
Alright, thank you.
The Japan. Yeah, Japan, they they really have such kind of
mindset for their faster before they already have a in our
company that they they have the Tokyo Data Center and Osaka Data
Center replicating between after we move to Azure they they buy
in such kind of idea and they build their second actual region
to to host to replicate the critical distance.
Uh. Disasters. Sometimes. Yeah, I I I think about disaster.
Yeah, people may not really aware.
Is that unless it happened so if someone had experienced and they
will know how important thing and another thing is that if
really disaster happen, people say people safety is all the the
priority. Yeah this one remember even yeah in the scene here word
you need to take care about the people instead of this some
people safety first yeah.
I did, too. Yeah, actually, yeah. All the technology side.
It's easy to IT to solve. But but the budget is the final one.
You need to start.
OK. And then the other questions?
The thing about.
No, it look like there's any great presentations.
June and Nathan.
I agree.
Always great presentations you guys have always learn a lot.
Lots of stuff that I never knew.
No.
If there aren't any other questions, I will go ahead and
close out the meeting.
So thank you, Jun and Nathan for your presentations. We do have
Derek Lewis.
And another, Derek and Casey presenting next week. I cannot
say the other Derek's last name, so.
So yeah, join us next week for those presentations as well.
And I hope you guys all have a good night.
Thank you and goodnight.
Thank you guys. Appreciate it.