ACE Security & Encryption Protocols 2 — Questions and Answers
Question 1: Which encryption algorithm does Acronis Cyber Protect use by default for backup data encryption?
- 3DES-168
- AES-256 (Correct answer)
- Blowfish-128
- RSA-2048
Correct answer: AES-256
Acronis Cyber Protect uses AES-256 (Advanced Encryption Standard with 256-bit key) as its default encryption algorithm for securing backup data.
Question 2: In Acronis, when encryption is applied to a backup, where is the encryption password stored?
- In the Acronis management server database
- In the backup archive metadata
- It is NOT stored anywhere by Acronis — the user must remember it (Correct answer)
- In the Windows Credential Manager automatically
Correct answer: It is NOT stored anywhere by Acronis — the user must remember it
Acronis does not store encryption passwords; if the password is lost, the backup cannot be recovered, so users must safeguard it independently.
Question 3: What is the purpose of the SSL/TLS certificate in Acronis Cyber Protect communication between agent and management server?
- To compress data during transfer
- To authenticate the management server and encrypt the communication channel (Correct answer)
- To sign backup archives with a digital fingerprint
- To validate the backup integrity checksum
Correct answer: To authenticate the management server and encrypt the communication channel
SSL/TLS certificates authenticate the management server identity and establish an encrypted channel, preventing man-in-the-middle attacks between agents and the server.
Question 4: Which port does Acronis Cyber Protect Management Server use by default for HTTPS web console access?
- 8080
- 9877 (Correct answer)
- 443
- 8443
Correct answer: 9877
The Acronis Cyber Protect Management Server web console listens on port 9877 by default for HTTPS connections.
Question 5: What does 'encryption at rest' mean in the context of Acronis backups?
- Data is encrypted only while being transferred over the network
- Data is encrypted while stored in the backup location, regardless of network state (Correct answer)
- Data is encrypted only on the source machine before backup starts
- Data is encrypted in RAM during processing
Correct answer: Data is encrypted while stored in the backup location, regardless of network state
Encryption at rest means backup data remains encrypted in its storage location, protecting it from unauthorized physical or storage-level access even without network involvement.
Question 6: When configuring Acronis backup encryption, which encryption mode provides the highest security for CBC vs CTR considerations?
- ECB (Electronic Codebook) mode for its simplicity
- CBC (Cipher Block Chaining) which chains blocks for stronger diffusion (Correct answer)
- CTR (Counter) mode only, as it is FIPS 140-2 approved
- Acronis always uses ECB regardless of configuration
Correct answer: CBC (Cipher Block Chaining) which chains blocks for stronger diffusion
Acronis implements AES in CBC mode, where each cipher block depends on previous blocks, making it more resistant to pattern analysis than ECB mode.
Question 7: In Acronis Cyber Protect, what happens to backup encryption if you change the encryption password mid-backup-plan?
- All existing archives are automatically re-encrypted with the new password
- Existing archives retain the old password; only new backups use the new password (Correct answer)
- The plan is suspended until all archives are re-encrypted
- Encryption changes are not allowed once a backup plan is active
Correct answer: Existing archives retain the old password; only new backups use the new password
When you change the encryption password, existing backup archives keep the original password while subsequent backup runs use the new password, requiring you to track both.
ACE Security & Encryption Protocols 2
Which encryption algorithm does Acronis Cyber Protect use by default for backup data encryption?