How do RTO and RPO relate to each other in a disaster recovery plan?

• A. RTO measures downtime tolerance; RPO is data loss tolerance; both define DR targets and influence recovery strategies.
• B. RPO measures downtime; RTO measures data loss.
• C. RTO and RPO are optional in a DR plan.
• D. RTO equals RPO in most plans.

Answer: (A)

RTO and RPO set how a disaster recovery plan measures acceptable impact and shapes how you recover. Recovery Time Objective (RTO) is about downtime tolerance—the maximum amount of time a business process can be unavailable. Recovery Point Objective (RPO) is about data loss tolerance—the maximum amount of data you’re willing to lose, usually expressed in time, such as minutes or hours since the last good backup.

These two targets go hand in hand: they define the DR targets and drive the recovery strategies you put in place. If you can tolerate only a few minutes of data loss (tight RPO), you’ll need frequent or continuous data protection and near-synchronous replication. If you must restore operations within a tight window after an outage (short RTO), you’ll implement fast failover, preconfigured recovery environments, and rapid recovery procedures. Conversely, looser RTOs and RPOs allow more relaxed approaches, with longer downtime and less aggressive data protection.

They are essential parts of a DR plan and are rarely equal in practice; the specific RTO and RPO depend on how critical a process is and what level of acceptable disruption the business can endure.