CAS-003 · Question #663
A Chief Information Security Officer (CISO) has created a survey that will be distributed to managers of mission-critical functions across the organization. The survey requires the managers to…
The correct answer is B. Business impact D. Recovery point objective. This survey is a classic Business Impact Analysis (BIA) activity - the process of identifying mission-critical functions and quantifying the operational and financial consequences of disruption, making Business Impact (B) clearly correct. The stated correct answer also includes…
Question
A Chief Information Security Officer (CISO) has created a survey that will be distributed to managers of mission-critical functions across the organization. The survey requires the managers to determine how long their respective units can operate in the event of an extended IT outage before the organization suffers monetary losses from the outage. To which of the following is the survey question related? (Select TWO)
Options
- ARisk avoidance
- BBusiness impact
- CRisk assessment
- DRecovery point objective
- ERecovery time objective
- FMean time between failures
How the community answered
(27 responses)- B93% (25)
- E4% (1)
- F4% (1)
Explanation
This survey is a classic Business Impact Analysis (BIA) activity - the process of identifying mission-critical functions and quantifying the operational and financial consequences of disruption, making Business Impact (B) clearly correct. The stated correct answer also includes Recovery Point Objective (D), which defines the maximum tolerable data loss measured in time (e.g., the last acceptable backup point before a failure). Note: the survey question as worded - 'how long can operations continue before monetary losses' - more precisely describes Recovery Time Objective (RTO), which defines the maximum tolerable downtime. RPO is concerned with data loss tolerance, not operational downtime duration. If this appears on an exam with answers B and E available, B (Business Impact) and E (Recovery Time Objective) may be the more technically precise pairing; however, both RTO and RPO are outputs of a BIA, and exam answer keys sometimes use them interchangeably in this context.
Topics
Community Discussion
No community discussion yet for this question.