Examkin

Question

Difficulty: Very hardBusiness Impact Analysis and Business Continuity Management

An enterprise online payment gateway has established a Maximum Tolerable Downtime (MTD) of 44 hours and a Recovery Point Objective (RPO) of 1515 minutes for its transactional core. During a disaster recovery test following a simulated primary facility outage, engineers observe that data replication occurs at 1010-minute intervals, secondary virtual infrastructure deployment requires 22 hours, and database state restoration and integrity verification require an additional 2.52.5 hours before operations can resume. Which of the following statements accurately evaluates the organization's current business continuity posture?

  1. The calculated Recovery Time Objective (RTO) of 4.54.5 hours exceeds the Maximum Tolerable Downtime (MTD), creating unacceptable operational risk.Answer
  2. B
    The 1010-minute data replication window violates the Maximum Tolerable Downtime (MTD) requirement by allowing excessive downtime.
  3. C
    The deployment phase of 22 hours fails to satisfy the Recovery Point Objective (RPO), resulting in severe data loss.
  4. D
    Utilizing a warm site recovery model operates as a deterrent control rather than a corrective strategy, contradicting BIA mandates.

Answer

The calculated Recovery Time Objective (RTO) of 4.54.5 hours exceeds the Maximum Tolerable Downtime (MTD), creating unacceptable operational risk.
The scenario describes infrastructure deployment (22 hours) and system restoration/verification (2.52.5 hours), yielding a total recovery duration (RTO) of 4.54.5 hours. Because MTD is the absolute limit of acceptable outage time (44 hours), an RTO of 4.54.5 hours violates MTD criteria.

Step-by-Step Solution

1
Calculate the total Recovery Time Objective (RTO) from the scenario metrics.
Infrastructure deployment (22 hours) ++ State restoration and integrity verification (2.52.5 hours) == 4.54.5 hours total recovery time.
RTO includes the overall timeframe necessary to restore systems and data to an operational state.
2
Evaluate the Recovery Point Objective (RPO) metric against replication frequency.
Replication interval is 1010 minutes, which is within the allowable 1515-minute RPO threshold.
Data loss is bounded by the 1010-minute replication gap, satisfying the RPO requirement.
3
Compare total RTO against Maximum Tolerable Downtime (MTD).
Total RTO (4.54.5 hours) >> MTD (44 hours).
An RTO exceeding MTD indicates the system cannot be recovered before irreparable business damage occurs.

Key Concept

Alignment of Recovery Time Objective (RTO) and Maximum Tolerable Downtime (MTD) in Business Impact Analysis
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic