SY0-701 Security Operations Practice Question
An internal finance application has an RTO of 2 hours and an RPO of 30 minutes. Current backups restore in about 6 hours because the team must rebuild the server from scratch. Which change best aligns the recovery design to the business requirement?
⚠ Common exam trap
Candidates often think increasing backup frequency or retention solves the RTO problem, but RTO is about recovery time, not data loss tolerance (RPO), and only a pre-staged recovery system like a warm standby can reduce the time to bring the application online.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a warm standby or replicated recovery system that can be brought online within the RTO
The business requires an RTO of 2 hours and an RPO of 30 minutes, but current backups take 6 hours to restore because the server must be rebuilt from scratch. Adding a warm standby or replicated recovery system allows the application to be brought online within the RTO by maintaining a pre-configured, partially synchronized environment that can be activated quickly, reducing recovery time from hours to minutes. This aligns the recovery design with the business continuity requirements by meeting both the RTO and RPO targets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add a warm standby or replicated recovery system that can be brought online within the RTO
Why this is correct
A warm standby keeps a replicated copy of the application and its data on standby infrastructure that is powered on and ready. On failure, you can redirect traffic and promote the standby in minutes, which directly satisfies the 2-hour RTO. Because replication continuously updates the recovery point, the RPO is kept small, and you avoid the long rebuild and restore process from backup media.
- ✗
Keep the same design and simply increase backup retention
Why it's wrong here
Increasing backup retention only extends how far back in time you can restore data; it does nothing to accelerate the recovery process itself. The RTO demand of 2 hours is about how quickly the finance application must be available after an outage, and retention still requires a full restore from potentially slow storage. Therefore, longer retention addresses data archival needs, not the speed of bringing the system online.
- ✗
Switch to weekly full backups only
Why it's wrong here
Switching to weekly full backups means the latest possible recovery point is up to seven days old, which would likely violate a strict RPO requirement. Weekly backups also typically create a single large restore job that can take longer to complete than smaller, more frequent differential or transaction log backups. This change reduces data protection granularity and worsens both the recovery point and the practicality of meeting a 2-hour RTO.
- ✗
Reduce logging on the application server to improve restore speed
Why it's wrong here
Reducing logging on the application server may lower I/O overhead and disk usage, but the dominant source of recovery delay is rebuilding the OS, reconfiguring the application, and restoring the database, not the size of log files. Logs are essential for troubleshooting the cause of an outage and for audit/compliance in a finance application, so reducing them creates operational and security risks. This option does nothing to provide a standby system or improve the underlying restoration workflow that drives the RTO.
Go deeper
Related to this question
Learn chapter
System and OS Hardening
Key term
RPO
Recovery Point Objective (RPO) is the maximum acceptable amount of data loss measured in time, defining how recent data must be to resume operations after a disruption.
Key term
RTO
Recovery Time Objective is the maximum acceptable time to restore a system or data after a disaster, defining how quickly normal operations must resume.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.