nerdexam
CompTIA

CAS-002 · Question #79

There have been some failures of the company's customer-facing website. A security engineer has analyzed the root cause to be the WAF. System logs show that the WAF has been down for 14 total hours…

The correct answer is C. 4 hours. MTTR (Mean Time To Repair) measures the average time to restore service after unplanned failures, excluding scheduled maintenance.

Research and Analysis

Question

There have been some failures of the company's customer-facing website. A security engineer has analyzed the root cause to be the WAF. System logs show that the WAF has been down for 14 total hours over the past month in four separate situations. One of these situations was a two hour scheduled maintenance activity aimed to improve the stability of the WAF. Which of the following is the MTTR, based on the last month's performance figures?

Options

  • A3 hours
  • B3.5 hours
  • C4 hours
  • D4.666 hours

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    80% (16)
  • D
    5% (1)

Why each option

MTTR (Mean Time To Repair) measures the average time to restore service after unplanned failures, excluding scheduled maintenance.

A3 hours

3 hours does not result from any valid MTTR formula applied to the provided figures.

B3.5 hours

3.5 hours incorrectly divides total downtime including scheduled maintenance (14 hours) by all four incidents, but scheduled maintenance is not a repair event.

C4 hoursCorrect

MTTR is calculated by dividing total unplanned downtime by the number of unplanned incidents. The 2-hour scheduled maintenance window is excluded, leaving 12 hours of unplanned downtime across 3 unplanned incidents. 12 divided by 3 equals 4 hours.

D4.666 hours

4.666 hours does not correspond to any standard MTTR calculation using the data provided.

Concept tested: MTTR calculation excluding scheduled maintenance events

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#MTTR#availability metrics#WAF#incident management

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice