Examkin

Question

Difficulty: HardBusiness Impact Analysis and Business Continuity Management

A logistics enterprise is updating its business continuity management plan for its central warehouse execution system. A Business Impact Analysis (BIA) determines that data loss exceeding 15 minutes will cause unrecoverable state desynchronization across automated sorting units, while the system can remain completely offline for up to 6 hours before contract penalties take effect. The infrastructure team proposes a disaster recovery architecture utilizing asynchronous backup replication every 4 hours and an automated failover process that restores application availability within 2 hours. Which of the following statements correctly evaluates the proposed disaster recovery plan against the organization's business metrics?

  1. The proposed architecture fails to meet the Recovery Point Objective (RPO) because 4-hour replication permits up to 4 hours of data loss, exceeding the 15-minute threshold.Answer
  2. B
    The proposed architecture fails to meet the Recovery Time Objective (RTO) because bringing the environment online in 2 hours exceeds the 15-minute operational limit.
  3. C
    The proposed architecture satisfies both the Recovery Point Objective (RPO) and Recovery Time Objective (RTO) because 2-hour restoration is well within the 6-hour window.
  4. D
    The asynchronous replication mechanism serves as a compensating preventive control that reduces the Maximum Tolerable Downtime (MTD).

Answer

The proposed architecture fails to meet the Recovery Point Objective (RPO) because 4-hour replication permits up to 4 hours of data loss, exceeding the 15-minute threshold.
The correct answer identifies that the 15-minute maximum tolerable data loss parameter represents the organization's Recovery Point Objective (RPO). Performing asynchronous backups every 4 hours leaves up to a 4-hour window of lost transactions during a crash, directly breaching the 15-minute RPO requirement.

Step-by-Step Solution

1
Identify the key metrics defined by the Business Impact Analysis (BIA)
The maximum allowable data loss timeframe is 15 minutes, which establishes the Recovery Point Objective (RPO) = 15 minutes. The maximum acceptable system offline duration is 6 hours, establishing the Recovery Time Objective (RTO) / Maximum Tolerable Downtime (MTD) = 6 hours.
BIA metrics separate acceptable data loss (RPO) from acceptable system downtime (RTO).
2
Analyze the proposed disaster recovery architecture parameters
Replication interval = 4 hours (potential data loss up to 4 hours). Restoration time = 2 hours (system offline time of 2 hours).
Replication frequency defines the actual data loss window, whereas failover restoration time defines the actual downtime.
3
Compare actual recovery parameters against required business metrics
The 2-hour restoration time meets the 6-hour RTO target (2 hours≤6 hours2 \text{ hours} \le 6 \text{ hours}). However, the 4-hour replication interval violates the 15-minute RPO requirement (4 hours>15 minutes4 \text{ hours} > 15 \text{ minutes}).
A valid continuity plan must satisfy both RTO and RPO requirements simultaneously.

Key Concept

Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic