Question: Which of the following actions is least important when quantifying risks associated with a potential disaster?
A. Gathering information from agencies that report the probability of certain natural disasters taking place in that area
B. Identifying the companys key functions and business requirements
C. Identifying critical systems that support the companys operations
D. Estimating the potential loss and impact the company would face based on how long the outage lasted

Download pdf (with explanations) edition of this exam.