A database must lose no more than ten minutes of committed data and return within two hours. Which requirements express these targets?

1. A ten-minute backup retention period and a two-hour audit cycle
2. RPO of ten minutes and RTO of two hours
3. A two-hour service contract term and ten-minute password lifetime
4. RTO of ten minutes and RPO of two hours