SY0-701 Security Operations Practice Question
During a restore test, a technician brings back a file server successfully, but the application team discovers that the database is missing the last 12 hours of transactions. Management says the business can tolerate only one hour of data loss. What should be changed first?
⚠ Common exam trap
It's easy for candidates to confuse Recovery Point Objective (RPO) with Recovery Time Objective (RTO), leading candidates to select options that improve restore speed (RTO) or backup retention rather than addressing the frequency of backups needed to limit data loss.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement application-consistent backups or transaction log backups more frequently.
The core issue is that the database is missing 12 hours of transactions, which exceeds the business's tolerance of one hour of data loss. This indicates that the Recovery Point Objective (RPO) is not being met. Implementing application-consistent backups or more frequent transaction log backups ensures that the database state can be recovered to a point within the acceptable loss window, directly addressing the RPO gap.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reduce the restore point objective by storing more copies of the same backup.
Why it's wrong here
Storing additional copies of the same backup does not lower the recovery point objective (RPO) because RPO is defined by the maximum age of data that may be lost when recovery is performed. Duplicate copies all represent the same point-in-time snapshot, so the potential data-loss window remains unchanged. To reduce RPO, you must capture changes more frequently, such as via transaction log backups or more frequent snapshots, not simply replicate the same stale backup set.
- ✓
Implement application-consistent backups or transaction log backups more frequently.
Why this is correct
Implementing application-consistent backups or transaction log backups more frequently directly reduces the recovery point objective (RPO) by shortening the interval between captured changes. Application-consistent backups ensure the database is in a valid state, while transaction log backups record every committed transaction, enabling point-in-time recovery to a precise moment. If the maximum tolerated data loss is one hour, capturing transaction logs every 15 minutes satisfies that target, whereas nightly full backups alone could lose up to 24 hours of data.
- ✗
Extend the retention period so the full backup is kept for 90 days.
Why it's wrong here
Extending the retention period to 90 days affects how long backup data is available for restoration, but it does nothing to close the gap between backups. RPO is determined by the frequency of backups, not by how long they are kept; even a 90-day-old full backup offers the same recovery point as a 1-day-old backup if it is the latest one. Retention is relevant for compliance or disaster recovery from older corruption, but it cannot reduce the maximum data loss from a failure occurring just before the next scheduled backup.
- ✗
Shorten the recovery time objective by using faster storage for the server.
Why it's wrong here
Using faster storage for the server can accelerate the restore process and thus help meet a recovery time objective (RTO), but it does not affect the recovery point objective (RPO). The issue described is data loss, which is measured by how recent the recovered data is, not by how quickly it can be restored. Shortening the RTO target itself is a design goal; faster hardware may assist in achieving it, but it has no impact on the frequency of backups or the amount of data that could be lost.
Go deeper
Related to this question
Learn chapter
Identity and Access Management
Key term
Recovery point objective
Recovery point objective (RPO) is the maximum acceptable amount of data loss measured in time, determining how frequently backups must be taken.
Key term
Business Continuity Planning
Business Continuity Planning is the process of creating a strategy to keep an organization's essential functions running during and after a major disruption.
About these practice questions
Courseiva writes every SY0-701 question from scratch — 1,013 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.