Domain 2 of 5 · Chapter 2 of 3

Disaster Recovery

Unlock the complete study guide + 1,040 practice questions across 16 full exams.

Bundled into the existing Certified in Cybersecurity premium course — no separate purchase.

Included in this chapter:

  • What disaster recovery is, and how it differs from BC
  • RPO and RTO: the two targets that drive every DR choice
  • The components of a DR plan: backups, recovery sites, and order
  • Exam-pattern recognition

Recovery site types by readiness

Site typeWhat is already thereRecovery speedCost
Cold siteSpace, power, connectivity only; no IT equipmentSlowest (days)Lowest
Warm sitePartly equipped: some hardware, software, and connectivityModerate (hours to a day)Medium
Hot siteFully running duplicate, data kept currentFastest (minutes)Highest

Decision tree

Recovery within daysacceptable? (the RTO)Cold site + offsite backupscheapestrecovery in daysYesRecovery within hoursacceptable?No, fasterWarm sitepartly equippedrecovery in hoursYesRecovery within minutesrequired?No, fasterHot siterunning duplicatepriciest, recovery in minutesYesRule: pick the cheapest option thatstill meets the RTO

Cheat sheet

  • Disaster recovery restores the IT systems and data after a disaster
  • DR restores the technology; business continuity keeps the mission running
  • RPO is the maximum data loss you can accept, measured as time
  • RTO is the maximum downtime you can accept before restoring
  • RPO is about data lost; RTO is about time down
  • A tighter RPO or RTO costs more
  • Reliable, tested, offsite backups are the foundation of recovery
  • RAID and replication are redundancy, not backup
  • A recovery site is the alternate location you fail over to
  • A cold site is empty space, cheapest and slowest
  • A warm site is partly equipped, a middle ground
  • A hot site is a running duplicate, fastest and priciest
  • Cost and recovery speed rise together from cold to warm to hot
  • Restore the most critical systems first, following the BIA
  • An untested DR plan is unproven
  • The 3-2-1 backup rule keeps 3 copies on 2 media types with 1 copy offsite
  • Incremental and differential backups trade backup speed for restore complexity
  • Redundancy eliminates single points of failure to protect availability
  • Failover automatically switches operations to a standby system when the primary fails
  • A tabletop exercise validates a plan through discussion, without touching production

Unlock with Premium — includes all practice exams and the complete study guide.

Also tested in

References

  1. https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf