Soru

Zorluk: Çok zorBusiness Impact Analysis and Business Continuity Management

An enterprise healthcare network is designing its disaster recovery architecture for an intensive care telemedicine system. The system requires near-zero data loss tolerance due to continuous patient data telemetry. The engineering plan specifies synchronous database snapshotting every 5 minutes to a secondary region and an automated infrastructure deployment playbook that restores full patient monitoring service within 30 minutes of a primary site disaster. Which of the following statements correctly evaluate the organization's business impact analysis metrics and business continuity strategy for this deployment? (Select TWO.)

  1. The 5-minute database snapshotting interval directly defines a Recovery Point Objective (RPO) threshold of no more than 5 minutes of data loss.Cevap
  2. The 30-minute automated recovery playbook capability establishes a target Recovery Time Objective (RTO) of 30 minutes for service restoration.Cevap
  3. C
    The 30-minute recovery timeframe represents the Recovery Point Objective (RPO), which measures the maximum tolerable elapsed time until system restoration occurs.
  4. D
    Automated multi-region database replication operates primarily as a corrective security control to detect unexpected data corruptions.

Cevap

The statement defining the 5-minute snapshot interval as the Recovery Point Objective (RPO) and the statement defining the 30-minute service restoration target as the Recovery Time Objective (RTO) are both correct.
The parameters described directly map to core BIA metrics: RPO quantifies acceptable data loss in terms of time (the 5-minute interval between database syncs), while RTO quantifies the maximum acceptable elapsed duration of system unavailability (the 30-minute restoration timeframe).

Adım Adım Çözüm

1
Analyze the data loss constraint in the scenario.
Database snapshots occur every 5 minutes, limiting potential lost data to a maximum window of 5 minutes.
Recovery Point Objective (RPO) dictates the acceptable threshold of data loss measured in time prior to the incident.
2
Analyze the service downtime constraint in the scenario.
The automated deployment playbook brings services back online within 30 minutes.
Recovery Time Objective (RTO) defines the targeted duration of time allowed to restore business operations after a failure.
3
Evaluate distractor claims regarding control types and metric definitions.
Distinguish RPO from RTO and identify replication as a resiliency/redundancy mechanism rather than a detective control.
RPO focuses on data currency, RTO focuses on downtime duration, and data replication provides high availability rather than error detection.

Anahtar Kavram

Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis
Bu soruyu puanla