VMCE Backup Infrastructure and Repositories 4 — Questions and Answers
Question 1: Which Veeam backup repository type supports immutability to protect against ransomware attacks?
- Windows SMB share
- Linux hardened repository (Correct answer)
- NFS share
- CIFS share
Correct answer: Linux hardened repository
The Linux hardened repository uses immutable backup files via the chattr +i attribute, preventing modification or deletion for a configurable period.
Question 2: What is required on a Linux server to enable the hardened repository immutability feature in Veeam?
- Root SSH access must always be enabled
- A non-root account with specific sudo permissions (Correct answer)
- SELinux must be disabled
- AppArmor must be configured
Correct answer: A non-root account with specific sudo permissions
A non-root account with specific sudo rights is required so Veeam can set file immutability without needing persistent root access.
Question 3: In Veeam, which backup mode reads only the changed data blocks since the last backup by querying Changed Block Tracking?
- Full Backup
- Incremental Backup (Correct answer)
- Differential Backup
- Synthetic Full Backup
Correct answer: Incremental Backup
Incremental backup reads only changed data blocks since the last backup session using VMware CBT or Hyper-V RCT.
Question 4: Which Veeam configuration backup option stores the backup server configuration in an encrypted archive?
- Configuration Backup with password (Correct answer)
- Secure Restore
- Encrypted Backup Copy
- KMS integration
Correct answer: Configuration Backup with password
Setting a password on the Veeam configuration backup encrypts the archive, protecting credentials and sensitive infrastructure data.
Question 5: What is the purpose of the GFS (Grandfather-Father-Son) retention policy in Veeam?
- Automatically tiering backups between storage classes
- Retaining specific weekly, monthly, and yearly restore points long-term (Correct answer)
- Replicating backups to three separate locations
- Defining backup windows for three different VM groups
Correct answer: Retaining specific weekly, monthly, and yearly restore points long-term
GFS retention creates long-term restore points by flagging certain weekly, monthly, and yearly backups for extended retention beyond the standard policy.
Question 6: When configuring a SOBR Capacity Tier with Amazon S3, which credential type does Veeam support for authentication?
- Only IAM role-based access
- Only access key and secret key
- Both IAM roles and access key/secret key (Correct answer)
- Only SAML federation
Correct answer: Both IAM roles and access key/secret key
Veeam supports both IAM role-based authentication and access key/secret key pairs when configuring Amazon S3 as a Capacity Tier.
Question 7: Which Veeam feature periodically validates backup integrity by performing a test restore from the backup repository?
- SureBackup (Correct answer)
- Instant VM Recovery
- DataLabs
- Secure Restore
Correct answer: SureBackup
SureBackup automatically starts VMs from backups in an isolated virtual lab to verify recoverability and application health.
VMCE Backup Infrastructure and Repositories 4
Which Veeam backup repository type supports immutability to protect against ransomware attacks?