nerdexam
CompTIA

SK0-004 · Question #398

An outside contractor is hired to perform a business impact analysis of a simulated disaster. The contractor asks stakeholders what they think a hurricane would do to the business. This is an…

The correct answer is B. the question is subjective and does not represent a complete business impact analysis. A valid business impact analysis must use structured, quantitative data collection rather than subjective stakeholder opinions to accurately measure the financial and operational effects of a disaster scenario.

Security and disaster recovery

Question

An outside contractor is hired to perform a business impact analysis of a simulated disaster. The contractor asks stakeholders what they think a hurricane would do to the business. This is an inadequate method because:

Options

  • Athe question is related to disaster recovery, not impact analysis
  • Bthe question is subjective and does not represent a complete business impact analysis
  • Cit is impossible to perform an impact of anything simulated
  • Dhurricanes vary in intensity, so the business impact is always unknown

How the community answered

(46 responses)
  • A
    4% (2)
  • B
    61% (28)
  • C
    24% (11)
  • D
    11% (5)

Why each option

A valid business impact analysis must use structured, quantitative data collection rather than subjective stakeholder opinions to accurately measure the financial and operational effects of a disaster scenario.

Athe question is related to disaster recovery, not impact analysis

A business impact analysis specifically evaluates the operational and financial effects of disruptive events, which directly includes natural disaster scenarios; it is not limited to post-disaster recovery procedures.

Bthe question is subjective and does not represent a complete business impact analysisCorrect

Asking stakeholders what they 'think' a hurricane would do relies on personal perception rather than measurable metrics such as revenue loss per outage hour, recovery time objectives (RTO), recovery point objectives (RPO), and dependency mapping. A complete BIA requires systematic data gathering and financial modeling to produce actionable, defensible results that guide continuity planning decisions.

Cit is impossible to perform an impact of anything simulated

Using hypothetical or simulated disaster scenarios is a standard, accepted component of BIA methodology, allowing organizations to model potential impacts before a real event occurs.

Dhurricanes vary in intensity, so the business impact is always unknown

Variable storm intensity does not invalidate impact analysis; BIA frameworks use scenario ranges and probability-weighted modeling to account for varying severity levels within the same disaster type.

Concept tested: Business impact analysis methodology and data objectivity

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf

Topics

#business impact analysis#disaster recovery planning#risk assessment methodology#stakeholder analysis

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice