Examkin

Question

Difficulty: HardBusiness Impact Analysis and Business Continuity Management

A hospital network completes a Business Impact Analysis (BIA) for its critical electronic health records (EHR) database. The BIA determines that patient care workflows can tolerate a maximum system outage of 4 hours before safety is severely compromised. However, to prevent clinical record corruption and medication errors, the hospital can sustain a maximum of 15 minutes of unrecoverable transactional data loss. When configuring the disaster recovery architecture, which threshold specifically dictates the required database backup/replication frequency, and what is its correct definition?

  1. Recovery Point Objective (RPO), which defines the maximum acceptable period of data loss measured in time.Answer
  2. B
    Recovery Time Objective (RTO), which defines the maximum acceptable period of data loss measured in time.
  3. C
    Recovery Point Objective (RPO), which defines the maximum duration systems can remain offline before normal operations resume.
  4. D
    Maximum Tolerable Downtime (MTD), which acts as a detective security control governing automated database replication schedules.

Answer

The threshold that dictates database replication frequency is the Recovery Point Objective (RPO), which defines the maximum acceptable period of data loss measured in time.
The correct answer identifies Recovery Point Objective (RPO) as the metric defining the maximum acceptable period of data loss measured in time. In the scenario, the 15-minute data loss constraint specifies the RPO, meaning database synchronizations or backups must occur at least every 15 minutes so that an unexpected failure results in no more than 15 minutes of missing records.

Step-by-Step Solution

1
Differentiate between outage duration metrics and data loss metrics in the scenario.
The 4-hour limit represents the allowable system downtime (RTO/MTD), while the 15-minute limit represents the maximum allowable lost data timeframe.
BIA metrics separate operational downtime limits from data currency limits.
2
Identify the metric corresponding to the 15-minute data loss threshold.
The maximum acceptable data loss timeframe of 15 minutes defines the Recovery Point Objective (RPO).
RPO measures data freshness and determines how frequently backups or database synchronizations must execute.
3
Evaluate option definitions to ensure correct alignment of metric name and functional definition.
Recovery Point Objective (RPO) correctly describes the maximum acceptable period of data loss measured in time.
RTO focuses on recovery speed and service restoration timing, whereas RPO dictates data replication frequency.

Key Concept

Recovery Point Objective (RPO) vs. Recovery Time Objective (RTO)
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic