CompTIA CySA+ (CS0-003) — Question 368

Which of the following documents should link to the recovery point objectives and recovery time objectives on critical services?

Answer options

• A. Disaster recovery plan
• B. Business impact analysis
• C. Playbook
• D. Backup plan

Correct answer: B

Explanation

The Business Impact Analysis (B) is the document that assesses the effects of interruptions on critical services and identifies recovery point objectives and recovery time objectives. The Disaster recovery plan (A) outlines procedures for recovery but is based on the findings from the Business Impact Analysis. The Playbook (C) provides specific actions for incidents, while the Backup plan (D) details data backup processes, but neither directly ties to objectives for critical service recovery.