Question

Difficulty: HardBusiness Impact Analysis and Business Continuity Management

A cloud services enterprise performs a Business Impact Analysis (BIA) for its core payment settlement microservice. The assessment establishes that data loss exceeding 15 minutes will cause catastrophic financial reconciliation errors, and overall system outage cannot exceed 4 hours before regulatory non-compliance fines occur. The engineering team deploys asynchronous database replication operating on a 5-minute sync interval and an automated failover system capable of restoring full application functionality within 30 minutes. Which statement correctly evaluates this technical recovery architecture against the established BIA metrics?

  1. The 5-minute synchronization interval satisfies the 15-minute Recovery Point Objective (RPO), and the 30-minute failover time satisfies the Recovery Time Objective (RTO) within the 4-hour Maximum Tolerable Downtime (MTD).Answer
  2. B
    The 5-minute synchronization interval defines a 5-minute Recovery Time Objective (RTO), while the 30-minute system failover duration establishes the Recovery Point Objective (RPO).
  3. C
    The 15-minute data loss threshold represents the system's Recovery Time Objective (RTO), whereas the 4-hour outage limit represents its Recovery Point Objective (RPO).
  4. D
    The automated failover system functions as a detective security control for monitoring downtime, whereas asynchronous replication operates as a deterrent control against data loss.

Answer

The 5-minute synchronization interval satisfies the 15-minute Recovery Point Objective (RPO), and the 30-minute failover time satisfies the Recovery Time Objective (RTO) within the 4-hour Maximum Tolerable Downtime (MTD).
The option establishing that the 5-minute synchronization interval satisfies the 15-minute RPO and the 30-minute failover meets the RTO within the 4-hour MTD is correct. RPO represents acceptable data loss (15 minutes max required, 5 minutes achieved). RTO represents targeted recovery time (30 minutes achieved), which is safely beneath the MTD limit of 4 hours before severe business harm occurs.

Step-by-Step Solution

1
Identify the data loss parameter from the scenario.
The business allows a maximum of 15 minutes of lost transaction data.
Recovery Point Objective (RPO) dictates the maximum acceptable data loss measured in time back from the outage point.
2
Evaluate the technical replication mechanism against RPO.
Asynchronous database replication running every 5 minutes ensures data loss remains below the 15-minute RPO threshold.
Data loss in the worst-case failure scenario will not exceed 5 minutes of data, satisfying the 15-minute requirement.
3
Identify and compare the recovery time targets against maximum acceptable outage thresholds.
The 30-minute automated restoration capability (RTO) successfully falls within the 4-hour operational limit (MTD).
Recovery Time Objective (RTO) is the targeted system restoration timeframe, which must never exceed Maximum Tolerable Downtime (MTD).

Key Concept

Business Impact Analysis Metrics: RPO, RTO, and MTD Alignment
Estimated Time:2m 0s
Rate this question