nerdexam
ExamsCAS-001Questions#214
CompTIA

CAS-001 · Question #214

CAS-001 Question #214: Real Exam Question with Answer & Explanation

The correct answer is A: Business impact analysis. A Business Impact Analysis (BIA) is the correct tool because it systematically identifies all business functions and their dependencies, quantifies the operational and financial impact of disruption, and produces prioritized Recovery Time Objectives (RTOs) and Recovery Point Obje

Question

The Chief Executive Officer (CEO) has decided to outsource systems which are not core business functions; however, a recent review by the risk officer has indicated that core business functions are dependent on the outsourced systems. The risk officer has requested that the IT department calculates the priority of restoration for all systems and applications under the new business model. Which of the following is the BEST tool to achieve this?

Options

  • ABusiness impact analysis
  • BAnnualized loss expectancy analysis
  • CTCO analysis
  • DResidual risk and gap analysis

Explanation

A Business Impact Analysis (BIA) is the correct tool because it systematically identifies all business functions and their dependencies, quantifies the operational and financial impact of disruption, and produces prioritized Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs). This directly answers the question of which systems to restore first. ALE analysis (B) focuses on financial loss from threats. TCO analysis (C) addresses total cost of ownership. Residual risk and gap analysis (D) identifies remaining risk after controls - none of these establish restoration priority the way a BIA does.

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-001 Practice