nerdexam
Isaca

CRISC · Question #589

Which of the following outcomes of disaster recovery planning is MOST important to enable the initiation of necessary actions during a disaster?

The correct answer is B. Recovery time and maximum acceptable data loss thresholds. For disaster recovery planning, defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) is paramount to enable the initiation of necessary actions during a disaster.

Submitted by weili_xi· Apr 18, 2026Risk Response and Reporting

Question

Which of the following outcomes of disaster recovery planning is MOST important to enable the initiation of necessary actions during a disaster?

Options

  • ADefinition of disaster recovery plan (DRP) scope and key stakeholders
  • BRecovery time and maximum acceptable data loss thresholds
  • CA checklist including equipment, location of data backups, and backup sites
  • DA list of business areas and critical functions subject to risk analysis

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    80% (16)
  • C
    10% (2)
  • D
    5% (1)

Why each option

For disaster recovery planning, defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) is paramount to enable the initiation of necessary actions during a disaster.

ADefinition of disaster recovery plan (DRP) scope and key stakeholders

Definition of DRP scope and key stakeholders is an initial planning step but doesn't provide the actionable metrics needed to initiate and guide recovery efforts.

BRecovery time and maximum acceptable data loss thresholdsCorrect

Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are critical thresholds that directly enable the initiation of necessary actions during a disaster. RTO defines the maximum acceptable downtime, dictating how quickly systems must be restored, while RPO defines the maximum acceptable data loss, guiding backup and recovery strategies. These metrics provide clear targets for the incident response and recovery teams.

CA checklist including equipment, location of data backups, and backup sites

A checklist including equipment, location of data backups, and backup sites is a valuable component of the DRP, but the RTO and RPO are the overarching objectives that drive the creation and prioritization of such checklists.

DA list of business areas and critical functions subject to risk analysis

A list of business areas and critical functions subject to risk analysis is part of business impact analysis (BIA), which informs RTO/RPO, but the RTO/RPO themselves are the direct triggers for action.

Concept tested: Disaster recovery objectives (RTO, RPO)

Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/recovery-time-objective

Topics

#Disaster Recovery Planning#Recovery Time Objective (RTO)#Recovery Point Objective (RPO)#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CRISC Practice