An enterprise security architecture team is defining continuity metrics for a critical containerized payment gateway during a Business Impact Analysis (BIA). Executive leadership establishes that customer transaction records can tolerate a maximum data loss timeframe of minutes, and the payment gateway system must be fully restored and operational within hours following an uncontained infrastructure failure. Which of the following statements correctly align these operational requirements with business continuity metrics? (Select TWO.)
- The Recovery Point Objective (RPO) for transaction data persistence must be established at 15 minutes or less.Cevap
- BThe Recovery Point Objective (RPO) dictates that infrastructure services and application containers must be restored within 2 hours of an outage.
- The Recovery Time Objective (RTO) for the payment application system must be set to 2 hours or less.Cevap
- DImplementing an active-active high-availability database cluster replaces the need for establishing an RPO target or conducting data backups.
Cevap
The statement specifying that the Recovery Point Objective (RPO) must be set to 15 minutes or less, and the statement establishing that the Recovery Time Objective (RTO) must be set to 2 hours or less are both correct.
The parameters outlined in the scenario map directly to standard Business Impact Analysis (BIA) definitions: acceptable data loss timeframe ( minutes) defines the Recovery Point Objective (RPO), while acceptable system downtime before restoration ( hours) defines the Recovery Time Objective (RTO). Both options asserting these mappings accurately reflect business continuity design principles.
Adım Adım Çözüm
Anahtar Kavram
Recovery Point Objective (RPO) measures acceptable data loss duration, while Recovery Time Objective (RTO) measures acceptable service restoration timeframe.