Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

A bank backs up its core ledger to an offsite site every 4 hours. A ransomware attack corrupts the primary system 3 hours after the last backup, and the bank restores from that backup. Management's recovery point objective (RPO) is 1 hour. Which conclusion is most accurate?

The RPO is not met. Backups every four hours mean up to four hours of data can be lost, and three hours were actually lost, which exceeds the one-hour tolerance. A successful restore addresses recovery time, not the acceptable data loss.

  1. AThe RPO is met because the backup interval is shorter than the RTO
  2. BThe RPO is not met by design, because a 4-hour backup cycle can lose up to 4 hours of data, exceeding the 1-hour RPOCorrect
  3. CThe RPO is met because the restore succeeded
  4. DThe RPO is irrelevant for ransomware events

Explanation

With backups every 4 hours, worst-case data loss is 4 hours, and here 3 hours of data were lost, both above the 1-hour RPO. Successful restoration speaks to recovery capability, not to data loss tolerance. Comparing with the RTO mixes up two different metrics.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions