CompTIA Security+ (SY0-501) — Question 602

A security analyst is performing a BIA. The analyst notes that in a disaster, failover systems must be up and running within 30 minutes. The failover systems must use backup data that is no older than one hour. Which of the following should the analyst include in the business continuity plan?

Answer options

• A. A maximum MTTR of 30 minutes
• B. A maximum MTBF of 30 minutes
• C. A maximum RTO of 60 minutes
• D. A maximum RPO of 60 minutes
• E. An SLA guarantee of 60 minutes

Correct answer: D

Explanation

The correct answer is D, as RPO (Recovery Point Objective) specifies the maximum age of the data that can be recovered, which is set at 60 minutes in this scenario. MTTR (Mean Time To Repair) and MTBF (Mean Time Between Failures) are not directly related to data recovery time, and while RTO (Recovery Time Objective) refers to the time to recover systems, it does not address the age of the data being used.