Examkin

Soru

Zorluk: ZorBusiness Impact Analysis and Business Continuity Management

An enterprise security risk manager for a municipal smart grid utility is finalizing Business Impact Analysis (BIA) parameters and recovery strategies for two key systems: the real-time SCADA control network and the customer metering telemetry database. Which of the following statements accurately characterize the operational metrics or recovery dependencies established during this assessment? (Select TWO.)

  1. Establishing a Recovery Point Objective (RPO) of near-zero for the SCADA control network ensures that operational state changes and switching logs suffer minimal to no data loss during an unannounced failover.Cevap
  2. Defining a Maximum Tolerable Downtime (MTD) for the telemetry database establishes the maximum timeframe the organization can sustain an outage before experiencing irreversible loss or regulatory failure.Cevap
  3. C
    Setting a Recovery Time Objective (RTO) of 15 minutes for the telemetry database guarantees that no transaction records created during the 15 minutes prior to a failure will be lost.
  4. D
    Deploying an automated redundant failover site for the control management application serves as a preventive control designed to reduce the inherent likelihood of primary site physical disruptions.

Cevap

The correct options state that establishing a near-zero Recovery Point Objective (RPO) minimizes data loss for real-time SCADA logs, and that defining Maximum Tolerable Downtime (MTD) sets the absolute upper threshold of acceptable system outage duration before severe impact occurs.
The statements highlighting near-zero RPO for SCADA logs and the boundary role of MTD are correct. RPO specifies the temporal threshold of data loss an enterprise can tolerate, making near-zero RPO appropriate for volatile real-time SCADA state logs. MTD establishes the absolute maximum operational downtime permissible before catastrophic consequences occur.

Adım Adım Çözüm

1
Analyze the definitions and functions of core BIA metrics (RPO, RTO, MTD) within enterprise continuity planning.
Identified that RPO addresses acceptable data loss timeframes, while MTD defines maximum operational outage limits.
Accurate metrics categorization is required to evaluate BIA recovery targets.
2
Evaluate the statement regarding near-zero RPO for SCADA logs.
Confirmed true: RPO dictates maximum allowable data loss timeframe, which for high-priority SCADA state changes must be near zero.
SCADA systems require continuous transaction state retention to avoid dangerous operational desynchronization.
3
Evaluate the statement regarding MTD for the telemetry database.
Confirmed true: MTD represents the maximum allowable outage time before severe, irreparable business damage occurs.
MTD establishes the overarching time limit that bounds both RTO and Work Recovery Time (WRT).
4
Examine distractors for conceptual errors.
Rejected the RTO data loss statement because RTO measures recovery speed after an event, not pre-event data loss (which is RPO). Rejected the redundant site classification statement because failover clustering is a corrective/recovery control rather than a preventive control that reduces disaster probability.
Distractors confuse recovery timing definitions and security control categories.

Anahtar Kavram

Business Impact Analysis Metrics and Recovery Controls
Bu soruyu puanla

Konular

Business Impact Analysis and Business Continuity Management

Bu konudan daha fazla soru