nerdexam
Isaca

CRISC · Question #3

Recovery the objectives (RTOs) should be based on

The correct answer is C. maximum tolerable downtime.. Recovery Time Objectives (RTOs) establish the maximum allowable duration a system or process can be down following a disruptive event before unacceptable business impacts occur.

Submitted by kavita_s· Apr 18, 2026Risk Response and Reporting

Question

Recovery the objectives (RTOs) should be based on

Options

  • Aminimum tolerable downtime
  • Bminimum tolerable loss of data.
  • Cmaximum tolerable downtime.
  • Dmaximum tolerable loss of data

How the community answered

(19 responses)
  • A
    5% (1)
  • C
    89% (17)
  • D
    5% (1)

Why each option

Recovery Time Objectives (RTOs) establish the maximum allowable duration a system or process can be down following a disruptive event before unacceptable business impacts occur.

Aminimum tolerable downtime

RTO focuses on the maximum tolerable downtime, not the minimum, as businesses aim to operate as long as possible.

Bminimum tolerable loss of data.

Minimum tolerable loss of data relates to the Recovery Point Objective (RPO), which measures the acceptable amount of data loss.

Cmaximum tolerable downtime.Correct

Recovery Time Objective (RTO) defines the maximum acceptable period of time following a disaster or disruption for systems, applications, or functions to be restored to operation. This ensures that business operations can resume within an acceptable timeframe to minimize adverse impacts.

Dmaximum tolerable loss of data

Maximum tolerable loss of data refers to the Recovery Point Objective (RPO), which quantifies the acceptable data loss in terms of time.

Concept tested: Recovery Time Objective (RTO) definition

Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/recovery-objectives#recovery-time-objective-rto

Topics

#RTO#Recovery Time Objective#Business Continuity Planning#Downtime Tolerance

Community Discussion

No community discussion yet for this question.

Full CRISC Practice