nerdexam
Isaca

CISM · Question #171

Which of the following is MOST important to consider when determining backup frequency?

The correct answer is A. Recovery point objective (RPO). Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time - essentially, how far back in time you can afford to go when restoring from a backup. Backup frequency must be set at least as frequently as the RPO dictates. For example, an RPO…

Submitted by andres_qro· Apr 18, 2026Information Security Risk Management

Question

Which of the following is MOST important to consider when determining backup frequency?

Options

  • ARecovery point objective (RPO)
  • BMaximum tolerable outage (MTO)
  • CAllowable interruption window
  • DRecovery time objective (RTO)

How the community answered

(66 responses)
  • A
    88% (58)
  • B
    5% (3)
  • C
    2% (1)
  • D
    6% (4)

Explanation

Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time - essentially, how far back in time you can afford to go when restoring from a backup. Backup frequency must be set at least as frequently as the RPO dictates. For example, an RPO of 4 hours means backups must occur every 4 hours or less. RTO (D) defines how quickly systems must be restored, which influences recovery technology choices, not backup frequency. Maximum Tolerable Outage (B) and Allowable Interruption Window (C) relate to downtime duration, not data loss thresholds. RPO is the direct driver of how often backups must be taken.

Topics

#Recovery Point Objective (RPO)#Backup Frequency#Business Continuity Planning#Disaster Recovery

Community Discussion

No community discussion yet for this question.

Full CISM Practice