The correct answer is Ensure essential business functions can be resumed after a disruption.

A disaster recovery plan is designed to restore critical operations and services so the organization can continue to meet its mission and obligations. The plan sets recovery objectives such as recovery time objectives and recovery point objectives and documents the procedures, roles, and resources needed to bring systems and processes back into operation. The chief outcome is operational continuity and the resumption of essential business functions rather than completing any single technical task.

Limit the amount of data lost during an outage is an important objective that is addressed by backups and recovery point objectives. It is a component of recovery rather than the primary goal of the disaster recovery plan.

Demonstrate compliance with applicable laws and industry rules can be a requirement and a useful byproduct of having documented processes. Compliance itself is not the main purpose of disaster recovery planning, which focuses on restoring operations after a disruption.

Prevent security incidents from happening is a goal of security and risk mitigation programs. Disaster recovery assumes a disruptive event has occurred and concentrates on restoring services and reducing impact rather than preventing incidents.

Full AWS Practitioner Certification Question