Study. uk . com
  1. Home
  2. All questions
  3. Question 35

CompTIA Security+ study material · question 35 of 611

A business states that beyond 48 hours of downtime the company would not survive. The recovery time objective is then set at 48 hours. What is wrong?

  1. Maximum tolerable downtime applies only to physical sites
  2. The RTO should be set by the insurer
  3. The RTO must be set inside the maximum tolerable downtime, not equal to it
  4. The RTO must equal the recovery point objective
Show the answer

Answer: C. The RTO must be set inside the maximum tolerable downtime, not equal to it

Maximum tolerable downtime is the outer survival limit. Setting the objective at that limit leaves no margin for overrun.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 § 3.2 Business Impact Analysis

Challenge yourself on this topic → Study as cards