Which statement about the recovery point objective and the recovery time objective is TRUE for a critical online order-entry application?
- AThe recovery point objective specifies how long the application can be unavailable, while the recovery time objective specifies the volume of orders that may be lost during the outage.
- BThe recovery point objective specifies the maximum acceptable data loss measured back from the disruption, while the recovery time objective specifies the maximum acceptable interval before service is restored. Correct
- CBoth objectives are derived from the disaster recovery test schedule and revised only after a failed test, with no link to the business impact analysis.
- DThe recovery point objective is always shorter than the recovery time objective because data must be available before applications can be made operable to users.
Why A is wrong: This swaps the definitions, which is the most common candidate error; RPO concerns data loss, not duration of unavailability.
Why B is correct: This is the correct pairing: RPO is a data-currency target driving backup frequency and replication, while RTO is a service-availability target driving recovery infrastructure choices.
Why C is wrong: Tempting because test outcomes can refine plans, but RPO and RTO are derived from the BIA and approved by business owners; test schedules do not set them.
Why D is wrong: RPO can be shorter, equal to, or longer than RTO depending on the process; this option mistakes a sequencing intuition for a definitional rule.