An organization's security team is conducting a Business Impact Analysis (BIA) to establish operational recovery requirements for a customer portal database. Which of the following statements accurately describe the metrics used in this analysis? (Select TWO.)
- Recovery Time Objective (RTO) defines the maximum acceptable duration of time that a system can remain offline following a disruption.Answer
- BRecovery Point Objective (RPO) specifies the maximum acceptable duration of downtime before business operations suffer irreparable harm.
- Recovery Point Objective (RPO) determines the maximum tolerable age of data that can be lost during an outage to set backup frequency.Answer
- DImplementing RAID array mirroring on local database storage serves as a complete substitute for a disaster recovery backup strategy.
Answer
The statement defining Recovery Time Objective (RTO) as the maximum acceptable duration a system can remain offline and the statement defining Recovery Point Objective (RPO) as the maximum tolerable age of data loss determining backup frequency are both correct.
Recovery Time Objective (RTO) targets system availability by setting the maximum acceptable duration a system can stay offline. Recovery Point Objective (RPO) targets data protection by setting the maximum acceptable timeframe of lost transactions or data, directly governing backup frequencies.
Step-by-Step Solution
Key Concept
Distinguishing Recovery Time Objective (RTO) and Recovery Point Objective (RPO) metrics during Business Impact Analysis (BIA)