RTO vs RPO vs MTTR vs MTBF: the Security+ metrics people mix up, and how to keep them straight (opens in new tab)

You get a scenario question on the SY0-701. A company's database can lose at most 15 minutes of transactions, and it has to be back online within 2 hours of an outage. The question asks which metric describes the 15 minutes. If you have to stop and think, you are not alone. The recovery and risk metrics are some of the easiest points on the exam to bank and some of the easiest to throw away, because four of them sound almost identical and the test writers know it. Here is how I finally got th...