Examkin

Question

Difficulty: EasyBusiness Impact Analysis and Business Continuity Management

An IT security team is defining operational metric parameters during a Business Impact Analysis (BIA) for an enterprise enterprise resource planning (ERP) environment. Which TWO of the following statements correctly distinguish Recovery Time Objective (RTO) from Recovery Point Objective (RPO)?

  1. RTO specifies the maximum acceptable duration of service downtime following a disruptive incident.Answer
  2. RPO specifies the maximum allowable age of unrecovered data or data loss measured in time.Answer
  3. C
    RTO defines the allowable volume of lost database transactions, while RPO defines the timeframe required to repair hardware components.
  4. D
    RPO serves as a deterrent security control, while RTO functions exclusively as a preventive physical control.

Answer

Recovery Time Objective (RTO) defines the maximum acceptable downtime duration before systems are restored, while Recovery Point Objective (RPO) defines the maximum allowable timeframe of lost data.
The correct statements accurately define Recovery Time Objective (RTO) as the targeted duration of allowable system downtime and Recovery Point Objective (RPO) as the maximum tolerable age of data lost due to a disruptive event. Both parameters are foundational metrics established during a Business Impact Analysis (BIA) to shape continuity and backup strategies.

Step-by-Step Solution

1
Analyze the core definition of Recovery Time Objective (RTO).
RTO is identified as the maximum tolerable duration that a system or business function can remain offline after a disaster.
Establishing RTO guides the selection of disaster recovery methods and restoration speed requirements.
2
Analyze the core definition of Recovery Point Objective (RPO).
RPO is identified as the maximum acceptable window of data loss measured back from the point of failure.
Establishing RPO dictates data backup frequency and replication strategies.
3
Evaluate option statements against RTO and RPO parameters.
Statements defining RTO as downtime duration and RPO as tolerable data loss age accurately represent BIA recovery metrics.
RTO focuses on elapsed operational recovery time, while RPO focuses on data integrity and backup interval currency.

Key Concept

Distinguishing RTO and RPO in Business Impact Analysis
Estimated Time:1m 0s
Rate this question

Topics

Business Impact Analysis and Business Continuity Management

More questions from this topic