FirstTry

Objective 2.2

CC

Understand disaster recovery (DR).

Objective 2.2 sits in Business Continuity, DR, and Incident Response, which carries 10% of the Certified in Cybersecurity exam. The questions below are original, written from the official objective title above, and each explanation cites the ISC2 page it rests on.

Objective title verbatim from the official objectives. ISC2 exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-2Business Continuity, DR, and Incident Response

Where are IT recovery priorities and recovery time objectives developed?

At the hardware vendor's discretionVendors supply equipment against targets the business already owns.
During the yearly budget negotiationBudgets fund the targets; they do not define them.
During the business impact analysisCorrect · your answerCorrect. The BIA is where IT priorities and RTOs are set.
After the first real disaster strikesWaiting for a disaster means recovering without priorities at all.

Correct.

Checked against ready.gov, August 2026

Concept

Recovery targets are business decisions expressed in technical terms, so they are set where business consequences are measured, before any technology is chosen.

Why C

Priorities and recovery time objectives for information technology should be developed during the business impact analysis.

Source

Priorities and recovery time objectives for information technology should be developed during the business impact analysis.

Ready.gov, IT Disaster Recovery Plan, checked August 2026
#disaster-recovery#rto

Now you: objective 2.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-2Business Continuity, DR, and Incident Response

An order system your team runs supports a function that must resume within four hours. What recovery time should the system target?

Sample question 2 of 3

2-2Business Continuity, DR, and Incident Response

Your backup runs nightly at 01:00. Management is deciding how many hours of transactions the business could afford to lose in a failure. Which objective states that limit?

Sample question 3 of 3

2-2Business Continuity, DR, and Incident Response

Your users' laptops hold working files. Under the recommended backup pattern, where should that data go first?

Full Certified in Cybersecurity question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Business Continuity, DR, and Incident Response