Match each business continuity term to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Maximum time to restore a process after disruption
Maximum age of data that must be recovered
Plan to maintain business functions during disruption
Plan to restore IT infrastructure after disaster
Process to identify critical functions and dependencies
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Business Continuity Plan: A documented set of procedures and information that helps an organization respond to a disruption and resume normal operations.
Correct matches: A-BCP, B-DRP, C-BIA. Common confusions: MTD is about downtime, RPO is about data loss.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Business Continuity Plan: A documented set of procedures and information that helps an organization respond to a disruption and resume normal operations.
Why this is correct
This correctly defines a Business Continuity Plan (BCP), which focuses on maintaining business functions during a disruption.
Disaster Recovery Plan: A document that outlines procedures to recover IT infrastructure and systems after a disaster.
Why this is correct
This correctly defines a Disaster Recovery Plan (DRP), which is specifically about IT recovery.
Business Impact Analysis: The process of identifying critical business functions and the impact of disruptions on them.
Why this is correct
This correctly defines Business Impact Analysis (BIA), which assesses the effects of disruptions on business operations.
Maximum Tolerable Downtime: The maximum amount of data loss, measured in time, that an organization can accept.
Why it's wrong here
Incorrect — this describes Recovery Point Objective (RPO), not Maximum Tolerable Downtime (MTD). MTD is the maximum time a system can be down before causing unacceptable damage.
Recovery Point Objective: The maximum period of time that a system can be unavailable before causing significant harm to the business.
Why it's wrong here
Incorrect — this describes Maximum Tolerable Downtime (MTD), not Recovery Point Objective (RPO). RPO refers to acceptable data loss in time.
Go deeper
About these practice questions
Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.