Exam CISSP topic 1 question 39 discussion

The Recovery Point Objective (RPO) is the maximum amount of time for which loss of data is acceptable in the event of an outage or disaster. The RPO defines the point in time to which data must be recovered after a disruption, indicating the acceptable level of data loss. It represents the maximum tolerable period during which data may be lost without causing significant impact or harm to the business operations or objectives. For example, if a company has an RPO of 1 hour, it means that in the event of an outage, the organization can accept a maximum data loss of up to 1 hour's worth of data. The data must be restored or recovered to a state no older than 1 hour before the incident occurred.

RPO - The amount of data to back up. 24 hours? 48 hours and so on. RTO - The maximum amount of time it takes to restore the network. Nothing to do with data

Minimum amount of data we need to recover

There is 2 important parts to consider here. 1. "When RECOVERING from an outage" 2. "In terms of data recovery" They are not asking for the definition of RPO, which is the amount of data the business can lose, it's asking about the requirements for recovery. So if a business has an RPO of lets say 10 GB... That means that the business needs to recover those 10 GB. It's not asking what is acceptable in terms of how much data can be lost. D is incorrect. . I'm going with A.

Answer is D Page 123 of the official study guide 9th edition: An organization might perform database transaction log backups every 15 minutes. In that case, the RPO would be 15 minutes, meaning that the organization may lose up to 15 minutes’ worth of data after an incident. If an incident takes place at 8:30 a.m., the last transaction log backup must have occurred sometime between 8:15 a.m. and 8:30 a.m. Depending on the precise timing of the incident and the backup, the organization may have irretrievably lost between 0 and 15 minutes of data.

D is correct answer.

RPO recovery point objective is a time-based measurement of the maximum amount of data loss that is tolerable to an organization. Also called backup recovery point objective, RPO is additionally important to determining whether the organization’s backup schedule is sufficient to recover after a disaster.

I am doing with D as well. Recovery point objective (RPO) is defined as the maximum amount of data – as measured by time – that can be lost after a recovery from a disaster, failure, or comparable event before data loss will exceed what is acceptable to an organization. An RPOs determines the maximum age of the data or files in backup storage needed to be able to meet the objective specified by the RPO, should a network or computer system failure occur. An organization’s loss tolerance, or how much data it can lose without sustaining significant harm, is related to RPO and is set forth in the organization’s business continuity plan (BCP). This also dictates procedures for disaster recovery planning, including the acceptable backup interval, because it refers to the last point when the organization’s data was preserved in a usable format. For example, an RPO of 60 minutes requires a system backup every 60 minutes. https://www.druva.com/glossary/what-is-a-recovery-point-objective-definition-and-related-faqs/

The RPO defines the point in time before the incident where the organization should be able to recover data from a critical business process. For example, an organization might perform database transaction log backups every 15 minutes. In that case, the RPO would be 15 minutes, meaning that the organization may lose up to 15 minutes’ worth of data after an incident. If an incident takes place at 8:30 a.m., the last transaction log backup must have occurred some- time between 8:15 a.m. and 8:30 a.m. Depending on the precise timing of the incident and the backup, the organization may have irretrievably lost between 0 and 15 minutes of data.

Recovery Point Objective (RPO) describes the interval of time that might pass during a disruption before the quantity of data lost during that period exceeds the Business Continuity Plan’s maximum allowable threshold or “tolerance.”

Answer is D The recovery time objective (RTO) is the targeted duration of time between the event of failure and the point where operations resume. A recovery point objective (RPO) is the maximum length of time permitted that data can be restored from, which may or may not mean data loss.

D is describing RTO, Im going A