Business Impact Analysis (BIA) CRISC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A hospital's BIA identifies that the electronic health record (EHR) system is critical, with an RTO of 1 hour. The EHR system depends on an internal data center, a third-party cloud provider for backup, and a network service provider. The internal data center can be restored in 2 hours, the cloud backup in 30 minutes, and the network in 4 hours. What is the most significant constraint to meeting the EHR's RTO?

   • AThe cloud backup's 30-minute restoration time.
   • BThe internal data center's 2-hour restoration time.
   • CThe network service provider's 4-hour restoration time.
   • DThe EHR system's RTO of 1 hour is unrealistic.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A multinational corporation is conducting a BIA across its regional offices. The BIA team needs to collect data on critical functions and dependencies. The team has a limited budget and must ensure consistency across regions. However, some regions have complex dependencies that require clarification. What is the most effective approach?

   • AUse only questionnaires to ensure consistency and low cost.
   • BHold workshops in each region to gather data collectively.
   • CConduct interviews in all regions to capture detailed dependencies.
   • DUse a standardized questionnaire followed by targeted interviews for complex areas.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   When would a questionnaire be a more appropriate BIA data collection method than interviews?

   • AWhen data needs to be collected from a large number of respondents across multiple locations
   • BWhen the BIA team needs to explore complex dependencies in depth
   • CWhen the BIA team has unlimited time to conduct the analysis
   • DWhen the BIA team wants to build consensus among stakeholders
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An online brokerage firm's BIA determines that its trading database has an RPO of 5 minutes. The current replication solution can achieve an RPO of 15 minutes. The cost to upgrade to a solution that meets the 5-minute RPO is significant. The firm's risk appetite allows for a maximum data loss of 10 minutes for trading data. What is the most appropriate action?

   • AAdjust the RPO to 15 minutes to match the current solution.
   • BImplement a solution that achieves an RPO of 10 minutes, aligning with the risk appetite.
   • CAccept the risk because the current RPO is within the risk appetite.
   • DUpgrade the replication solution to meet the 5-minute RPO.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary basis for identifying and prioritizing critical business functions in a Business Impact Analysis (BIA)?

   • AThe budget allocated to each function
   • BThe impact of their disruption on organizational objectives
   • CThe number of employees assigned to each function
   • DThe age of the systems supporting each function
   Reveal Solution Discussion Select an answer first