Examkin

Question

Difficulty: HardBusiness Impact Analysis and Business Continuity Management

During a disaster recovery simulation for a financial institution's core transaction system, a database storage array failure occurred. Technical teams completed failover operations and declared the transaction service operational 33 hours after the initial outage. Transaction records were restored from log backups up to 1010 minutes prior to the failure. The organization's Business Impact Analysis (BIA) established a Recovery Time Objective (RTO) of 22 hours, a Recovery Point Objective (RPO) of 1515 minutes, and a Maximum Tolerable Downtime (MTD) of 55 hours. Based on these operational recovery metrics, which assessment accurately describes the outcome of this exercise?

  1. The exercise satisfied the RPO target but failed to meet the established RTO target.Answer
  2. B
    The exercise satisfied the RTO target but failed to meet the established RPO target.
  3. C
    The exercise failed both the RPO target and the MTD target.
  4. D
    The exercise breached the MTD target while successfully satisfying the RTO target.

Answer

The exercise satisfied the RPO target but failed to meet the established RTO target.
The correct assessment is that the exercise satisfied the RPO target but failed to meet the established RTO target. Recovery Point Objective (RPO) dictates the maximum acceptable data loss timeframe prior to an outage; because database logs were restored to a point 10 minutes before failure, the 10-minute actual data loss fell within the 15-minute RPO threshold. Recovery Time Objective (RTO) dictates the targeted maximum duration for restoring systems; because technical failover required 3 hours, the recovery exceeded the 2-hour RTO limit. The 3-hour downtime remained within the 5-hour Maximum Tolerable Downtime (MTD) ceiling.

Step-by-Step Solution

1
Evaluate the Recovery Point Objective (RPO) performance
Actual data loss was 1010 minutes, which is less than or equal to the allowable RPO limit of 1515 minutes (10 min≤15 min10\text{ min} \le 15\text{ min}).
RPO defines the maximum acceptable timeframe of data loss measured in time prior to the disruption.
2
Evaluate the Recovery Time Objective (RTO) performance
Actual recovery time was 33 hours, which exceeds the allowable RTO limit of 22 hours (3 hrs>2 hrs3\text{ hrs} > 2\text{ hrs}).
RTO defines the target duration of time within which a business process or IT infrastructure must be restored after a disruption.
3
Evaluate the Maximum Tolerable Downtime (MTD) performance
Actual total downtime of 33 hours was within the overall MTD limit of 55 hours (3 hrs≤5 hrs3\text{ hrs} \le 5\text{ hrs}).
MTD represents the absolute maximum duration a business function can be unavailable before irreversible damage occurs.
4
Synthesize the metric evaluations to form the overall assessment
RPO was satisfied (10 min≤15 min10\text{ min} \le 15\text{ min}), RTO was failed/breached (3 hrs>2 hrs3\text{ hrs} > 2\text{ hrs}), and MTD was not breached (3 hrs≤5 hrs3\text{ hrs} \le 5\text{ hrs}).
Comparing each actual result against its defined BIA threshold reveals that RPO passed while RTO failed.

Key Concept

Business Impact Analysis (BIA) Metrics: RTO vs RPO vs MTD
Estimated Time:2m 0s
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic