Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security

A bank sets its recovery time objective (RTO) for its internet banking platform at 2 hours. What does this mean?

An RTO of 2 hours means the internet banking platform must be restored within two hours of a disruption. It measures acceptable downtime. The acceptable amount of data loss, measured in time, is a separate measure called the recovery point objective.

  1. AThe maximum acceptable amount of data loss measured in time is 2 hours
  2. BThe maximum acceptable time within which the service must be restored after disruption is 2 hoursCorrect
  3. CThe platform must be audited every 2 hours
  4. DIncidents must be reported to the regulator within 2 hours

Explanation

RTO is the target duration within which a service must be restored after an outage. The maximum tolerable data loss measured in time is the recovery point objective (RPO), which is the first option's meaning. Audit frequency and regulatory reporting are unrelated concepts.

Did you get it right without looking?

One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.

More Cyber Security questions