CRISC Question #370: Real Exam Question with Answer & Explanation

Question

Which of the following risk impacts should be the PRIMARY consideration for determining recovery priorities in a disaster recovery situation?

Options

• AData security
• BRecovery costs
• CBusiness disruption
• DRecovery resource availability

Explanation

In a disaster recovery situation, the primary consideration for determining recovery priorities should be the business disruption caused by the disaster.

Common mistakes.

• A. Data security is crucial, but it's often a requirement within the recovery process rather than the primary driver for prioritization across all recovery efforts; minimizing overall business disruption encompasses data recovery.
• B. Recovery costs are a factor in planning and budgeting, but the immediate priority during a disaster is restoring critical functions, not primarily optimizing cost.
• D. Recovery resource availability dictates how recovery can proceed, but the priorities for what gets recovered first are determined by the impact of business disruption.

Concept tested. Disaster recovery prioritization based on business impact

Reference. https://docs.microsoft.com/en-us/azure/architecture/resiliency/business-continuity-dr

No community discussion yet for this question.