Certified Ethical Hacker (CEH v11) — Question 262

On performing a risk assessment, you need to determine the potential impacts when some of the critical business processes of the company interrupt its service.
What is the name of the process by which you can determine those critical businesses?

Answer options

• A. Emergency Plan Response (EPR)
• B. Business Impact Analysis (BIA)
• C. Risk Mitigation
• D. Disaster Recovery Planning (DRP)

Correct answer: B

Explanation

The correct answer is B, Business Impact Analysis (BIA), as it specifically focuses on assessing the effects of business process interruptions. The other options, such as Emergency Plan Response, Risk Mitigation, and Disaster Recovery Planning, relate to different aspects of risk management and recovery strategies rather than the initial assessment of critical business impacts.