ACE Security & Encryption Protocols 3 — Questions and Answers
Question 1: Which protocol does Acronis Cyber Protect Agent use to securely register with the Management Server during initial deployment?
- FTP over SSL
- HTTPS with certificate-based mutual authentication (Correct answer)
- SFTP with SSH keys
- Plain HTTP with token-based auth only
Correct answer: HTTPS with certificate-based mutual authentication
Agents register with the Management Server over HTTPS using certificate-based authentication to ensure both the agent and server verify each other's identity.
Question 2: What is the role of a self-signed certificate in a standalone Acronis Management Server deployment?
- It is not supported; only CA-signed certificates work
- It authenticates the server locally without requiring an external certificate authority (Correct answer)
- It provides stronger encryption than CA-issued certificates
- It is used only for agent-to-agent communication
Correct answer: It authenticates the server locally without requiring an external certificate authority
Self-signed certificates allow a standalone Acronis server to authenticate itself locally without a third-party CA, though browsers will show warnings since it's not trusted by default.
Question 3: Which Acronis security feature prevents unauthorized users from reading backup contents even if they gain access to the storage location?
- Backup verification checksums
- Deduplication fingerprinting
- Password-based AES-256 encryption of backup archives (Correct answer)
- RAID-based redundancy
Correct answer: Password-based AES-256 encryption of backup archives
AES-256 encryption of backup archives ensures that without the correct password, the data inside is computationally infeasible to read even with direct storage access.
Question 4: In Acronis Cyber Protect, what does enabling 'two-factor authentication (2FA)' protect against?
- Ransomware encrypting backup archives
- Unauthorized console access even when credentials are compromised (Correct answer)
- Network interception of backup data streams
- Agent communication channel spoofing
Correct answer: Unauthorized console access even when credentials are compromised
2FA on the Acronis management console requires a second verification factor, so stolen usernames and passwords alone cannot grant access to the backup management interface.
Question 5: What is the function of Acronis' 'Notary' service in the context of data security?
- It backs up certificate authority credentials
- It provides blockchain-based proof of file authenticity and integrity (Correct answer)
- It notifies administrators of failed backups via email
- It encrypts files using a distributed key management system
Correct answer: It provides blockchain-based proof of file authenticity and integrity
Acronis Notary uses blockchain technology to create tamper-proof records of file authenticity, allowing verification that a file has not been altered since it was notarized.
Question 6: When Acronis Cyber Protect transfers backup data to Acronis Cloud, which protocol secures the data in transit?
- FTP with FTPS extension
- TLS 1.2 or higher over HTTPS (Correct answer)
- IPSec tunnel with pre-shared keys
- SSH file transfer protocol (SFTP)
Correct answer: TLS 1.2 or higher over HTTPS
Acronis Cloud transfers use TLS 1.2 or higher over HTTPS, ensuring modern encryption standards protect data during transmission to the cloud storage.
Question 7: What is the significance of FIPS 140-2 compliance in an Acronis deployment for US government environments?
- It means Acronis can back up government systems without a license
- It certifies the cryptographic modules meet US federal security standards required for sensitive data (Correct answer)
- It enables Acronis to use NSA-approved compression only
- It disables all encryption features to comply with export controls
Correct answer: It certifies the cryptographic modules meet US federal security standards required for sensitive data
FIPS 140-2 certification means Acronis's cryptographic modules have been validated to meet US federal standards, which is often mandatory for handling government sensitive data.
ACE Security & Encryption Protocols 3
Which protocol does Acronis Cyber Protect Agent use to securely register with the Management Server during initial deployment?