CompTIA Security+ Exam Prep

Answer: B - A business impact analysis identifies which critical systems are needed by a company and estimates the outage time that can be tolerated for survival. This is referred to as maximum tolerable downtime (MTD). MTD should be put into five areas: nonessential = 30 days, normal = seven days, important = 72 hours, urgent = 24 hours, and critical = minutes to hours. Each business function and asset should be placed into one of these categories, depending upon how long the company can survive without it. These estimates will help the company determine what backup solutions are necessary to ensure the availability of these resources.