CISSP Security and Risk Management Practice Question
Which of the following is a key objective of a business impact analysis (BIA)?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Determine the maximum tolerable downtime for critical processes
BIA identifies critical business processes and their recovery requirements such as RTO, RPO, and maximum tolerable downtime.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Implement security controls
Why it's wrong here
Implementation follows risk assessment and BIA.
- ✗
Identify vulnerabilities in the network
Why it's wrong here
Vulnerability identification is part of risk assessment, not BIA.
- ✗
Test the disaster recovery plan
Why it's wrong here
Testing is a separate exercise after BCP/DRP development.
- ✓
Determine the maximum tolerable downtime for critical processes
Why this is correct
BIA focuses on determining recovery objectives.
Go deeper
Related to this question
Learn chapter
Incident Response and Business Continuity
Key term
Maximum tolerable downtime
Maximum tolerable downtime (MTD) is the total amount of time a business process or system can be unavailable before causing irreparable harm to the organization.
Key term
Business impact analysis
A systematic process used to identify and evaluate the potential effects of an interruption to critical business operations as a result of a disaster, accident, or emergency.
About these practice questions
Courseiva writes every CISSP question from scratch — 747 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.