A logistics enterprise is updating its business continuity management plan for its central warehouse execution system. A Business Impact Analysis (BIA) determines that data loss exceeding 15 minutes will cause unrecoverable state desynchronization across automated sorting units, while the system can remain completely offline for up to 6 hours before contract penalties take effect. The infrastructure team proposes a disaster recovery architecture utilizing asynchronous backup replication every 4 hours and an automated failover process that restores application availability within 2 hours. Which of the following statements correctly evaluates the proposed disaster recovery plan against the organization's business metrics?
- The proposed architecture fails to meet the Recovery Point Objective (RPO) because 4-hour replication permits up to 4 hours of data loss, exceeding the 15-minute threshold.Cevap
- BThe proposed architecture fails to meet the Recovery Time Objective (RTO) because bringing the environment online in 2 hours exceeds the 15-minute operational limit.
- CThe proposed architecture satisfies both the Recovery Point Objective (RPO) and Recovery Time Objective (RTO) because 2-hour restoration is well within the 6-hour window.
- DThe asynchronous replication mechanism serves as a compensating preventive control that reduces the Maximum Tolerable Downtime (MTD).
Cevap
The proposed architecture fails to meet the Recovery Point Objective (RPO) because 4-hour replication permits up to 4 hours of data loss, exceeding the 15-minute threshold.
The correct answer identifies that the 15-minute maximum tolerable data loss parameter represents the organization's Recovery Point Objective (RPO). Performing asynchronous backups every 4 hours leaves up to a 4-hour window of lost transactions during a crash, directly breaching the 15-minute RPO requirement.
Adım Adım Çözüm
Anahtar Kavram
Distinction between Recovery Point Objective (RPO) and Recovery Time Objective (RTO) in Business Impact Analysis