A government agency is initiating a BIA for its citizen services portal. The BIA team is unsure about the scope of the BIA and whether to include all services or only critical ones. The agency has limited resources and needs to focus on the most important services. What should the BIA team do?

Only include services that have experienced disruptions in the past

Exclude services that are outsourced to third parties

Include all services in the BIA to ensure comprehensive coverage

Focus the BIA on services that are critical to the agency's mission and have high impact if disrupted

What does the Maximum Tolerable Downtime (MTD) represent for a critical business function?

The target time within which the function must be restored after a disruption

The time required to test the recovery procedures for the function

The longest period of time the function can be unavailable without causing unacceptable damage to the organization

The amount of data, measured in time, that can be lost without significant harm

A hospital's electronic health record (EHR) system is critical for patient care. The BIA team has determined that the MTD for the EHR system is 4 hours, and the RTO is currently set to 2 hours. The IT department has proposed a recovery solution that can restore the EHR system in 1 hour, but it requires a significant investment. The hospital's CFO is concerned about the cost and suggests accepting a longer RTO of 3 hours to reduce expenses. The hospital's clinical staff insists that any outage longer than 2 hours would compromise patient safety. What should the BIA team recommend?

Accept the CFO's suggestion and set the RTO to 3 hours to save costs

Set the RTO to 1 hour, matching the recovery solution's capability

Maintain the RTO at 2 hours and invest in the 1-hour recovery solution

Set the RTO to 4 hours, matching the MTD, to balance cost and safety

An e-commerce company's order management system processes customer orders and updates inventory in real time. The company's BIA determines that losing more than 15 minutes of order data would cause significant financial loss and customer dissatisfaction. The IT team is designing the backup strategy for the order database. What should the recovery point objective (RPO) be for the order management system?

1 hour, because that is the standard backup interval for databases

0 minutes, because no data loss is acceptable

30 minutes, because that is the backup frequency that is cost-effective

15 minutes, because that is the maximum acceptable data loss

When is a survey or questionnaire most appropriate as a BIA data collection method?

When real-time system performance data is required

When in-depth, exploratory information is needed from a few key stakeholders

When the BIA team needs to observe business processes directly

When collecting standardized information from a large number of business units

EC-CouncilDisaster Recovery Professional

Domain 2Objective 2

Business Impact Analysis (BIA) EDRP Practice Questions (Page 2)

Part of the Risk and Business Impact Analysis domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 6–10

6application · medium
A government agency is initiating a BIA for its citizen services portal. The BIA team is unsure about the scope of the BIA and whether to include all services or only critical ones. The agency has limited resources and needs to focus on the most important services. What should the BIA team do?
Select an answer first
7foundation · easy
What does the Maximum Tolerable Downtime (MTD) represent for a critical business function?
Select an answer first
8expert · hard
A hospital's electronic health record (EHR) system is critical for patient care. The BIA team has determined that the MTD for the EHR system is 4 hours, and the RTO is currently set to 2 hours. The IT department has proposed a recovery solution that can restore the EHR system in 1 hour, but it requires a significant investment. The hospital's CFO is concerned about the cost and suggests accepting a longer RTO of 3 hours to reduce expenses. The hospital's clinical staff insists that any outage longer than 2 hours would compromise patient safety. What should the BIA team recommend?
Select an answer first
9application · medium
An e-commerce company's order management system processes customer orders and updates inventory in real time. The company's BIA determines that losing more than 15 minutes of order data would cause significant financial loss and customer dissatisfaction. The IT team is designing the backup strategy for the order database. What should the recovery point objective (RPO) be for the order management system?
Select an answer first
10foundation · easy
When is a survey or questionnaire most appropriate as a BIA data collection method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EDRP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EDRP” is a trademark of its owner, used for identification only.

Business Impact Analysis (BIA) EDRP Practice Questions (Page 2)

Questions 6–10

A government agency is initiating a BIA for its citizen services portal. The BIA team is unsure about the scope of the BIA and whether to include all services or only critical ones. The agency has limited resources and needs to focus on the most important services. What should the BIA team do?

What does the Maximum Tolerable Downtime (MTD) represent for a critical business function?

When is a survey or questionnaire most appropriate as a BIA data collection method?

Keep studying — Risk and Business Impact Analysis