A team promises recovery within two hours but has never restored a backup. What should it do?

1. Assume a successful login after failure proves every course is restored
2. Rehearse end-to-end restoration and measure the achieved recovery objectives
3. Treat the backup file's existence as proof of the two-hour recovery
4. Publish the promise without testing because cloud storage is durable