Comparison Table
| Option | Primary difference | Best use |
|---|---|---|
| RTO | How fast service must return | Restore-time target |
| RPO | How much data loss is acceptable | Backup/replication target |
| MTD | Maximum tolerable downtime | Business survival boundary |
Exam clue: Backups prove RPO only when restores are tested; they do not automatically meet RTO.
How To Use It
Read the scenario for the required outcome. If the requirement is prevention, do not stop at detection. If the requirement is accountability, do not stop at authentication. If the requirement is recovery, distinguish data loss from service downtime.