Examkin

Question

Difficulty: MediumBusiness Impact Analysis and Business Continuity Management

A retail organization completes a Business Impact Analysis (BIA) for its cloud-hosted Point-of-Sale (POS) transaction ingestion service. The BIA establishes a maximum acceptable data loss timeframe of 30 minutes and a maximum allowable service downtime of 4 hours. The disaster recovery team proposes updating off-site database replicas every 15 minutes while utilizing a cold recovery site that requires 6 hours to bring online. Which of the following best evaluates this proposed recovery strategy against the established BIA metrics?

  1. The data replication strategy satisfies the Recovery Point Objective (RPO), but the cold recovery site fails to meet the Recovery Time Objective (RTO).Answer
  2. B
    The data replication strategy satisfies the Recovery Time Objective (RTO), but the cold recovery site fails to meet the Recovery Point Objective (RPO).
  3. C
    The 15-minute replication interval violates the 4-hour Recovery Point Objective (RPO) by causing excessive data loss during failover.
  4. D
    The cold standby facility implementation functions primarily as a preventive control rather than a corrective continuity control.

Answer

The data replication strategy satisfies the Recovery Point Objective (RPO), but the cold recovery site fails to meet the Recovery Time Objective (RTO).
The correct evaluation recognizes that replicating database changes every 15 minutes limits potential data loss to 15 minutes, which successfully satisfies the 30-minute Recovery Point Objective (RPO). Conversely, bringing a cold standby site online takes 6 hours, which exceeds the 4-hour Recovery Time Objective (RTO) maximum downtime requirement.

Step-by-Step Solution

1
Map BIA time parameters to standard business continuity metrics.
Maximum acceptable data loss of 30 minutes corresponds to Recovery Point Objective (RPO). Maximum allowable downtime of 4 hours corresponds to Recovery Time Objective (RTO).
RPO defines the maximum tolerable age of unrecovered data, while RTO defines the duration within which business processes must be restored.
2
Compare proposed database replication schedule against RPO.
The 15-minute replication interval is less than the 30-minute RPO threshold (15 min≤30 min15\text{ min} \le 30\text{ min}), meaning RPO is satisfied.
Replicating every 15 minutes guarantees that at most 15 minutes of transaction data could be lost prior to a disruption.
3
Compare proposed cold site provisioning time against RTO.
The 6-hour site startup time exceeds the 4-hour RTO threshold (6 hrs>4 hrs6\text{ hrs} > 4\text{ hrs}), meaning RTO is violated.
Relying on a cold site that requires 6 hours to become operational causes unacceptable downtime for franchise operations.

Key Concept

Alignment of Business Continuity Metrics (RTO and RPO)
Estimated Time:1m 30s
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic