CISA Domain 4 Practice Exam

The correct answer focuses on the relationship between backup frequency and recovery point objectives (RPO). The recovery point objective is the maximum tolerable period during which data might be lost due to a major incident. To minimize data loss, backups must be performed in such a way that they do not exceed the established RPO.

If backups are less frequent than the RPO, there is a risk that data created between the last backup and an incident may be lost. By ensuring that backups are conducted at intervals that meet or are less than the RPO, organizations can effectively minimize potential data loss and ensure that in the event of a system failure or data breach, the restored data will be as recent as possible.

In contrast, stating that backups should always be completed daily does not account for situations where more frequent backups may be necessary based on the RPO requirements. Saying backups should not exceed the recovery time objective misinterprets the role of the RTO, which focuses on how quickly systems must be restored rather than how often data needs to be backed up. Conducting backups only during off-peak hours may not adequately meet the frequency needed to comply with RPOs, leading to greater data loss than acceptable.

Thus, by aligning backup frequency with the