Examkin

Question

Difficulty: MediumBusiness Impact Analysis and Business Continuity Management

A municipal water authority completes a Business Impact Analysis (BIA) for its critical SCADA telemetry database and central monitoring system. The BIA establishes that regulatory compliance permits a maximum data loss threshold of 15 minutes of historical sensor readings, while total system downtime before severe operational disruption occurs must not exceed 4 hours. Which of the following statements accurately interpret these business continuity metrics? (Select TWO.)

  1. The Recovery Point Objective (RPO) for the SCADA telemetry database is 15 minutes.Answer
  2. The Recovery Time Objective (RTO) for the central monitoring system is 4 hours.Answer
  3. C
    The Recovery Time Objective (RTO) for the SCADA telemetry database is 15 minutes.
  4. D
    Deploying high-availability redundant SCADA nodes functions as a detective security control to minimize recovery duration.

Answer

The statement specifying an RPO of 15 minutes for the telemetry database and the statement specifying an RTO of 4 hours for the central monitoring system are both correct.
The BIA defines two distinct metric constraints: maximum allowable data loss (15 minutes), which directly represents the Recovery Point Objective (RPO), and maximum allowable system downtime (4 hours), which directly represents the Recovery Time Objective (RTO). Identifying these two correctly satisfies both parts of the BIA requirement.

Step-by-Step Solution

1
Analyze the business metric for data loss tolerance.
The requirement allows at most 15 minutes of sensor data loss, which maps directly to the Recovery Point Objective (RPO).
RPO defines the maximum tolerable age of unrecovered data resulting from an outage.
2
Analyze the business metric for system outage duration tolerance.
The requirement limits total system downtime to 4 hours, which maps directly to the Recovery Time Objective (RTO).
RTO defines the maximum acceptable duration of time system operations can be offline.
3
Evaluate candidate options against RPO and RTO definitions and control categories.
Statements designating 15 minutes as RPO and 4 hours as RTO are accurate. Statements swapping RTO/RPO or misclassifying redundancy as a detective control are incorrect.
Correct mapping ensures alignment between BIA metrics and recovery implementation plans.

Key Concept

Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic