Data Backup and Recovery Flashcards

What is the 3-2-1 backup rule?

Answer: Keep 3 copies of data on 2 different media types with 1 copy offsite

The 3-2-1 backup rule is a best practice that recommends maintaining three copies of data, stored on two different media types, with one copy kept offsite for disaster recovery.

What is the key difference between incremental and differential backups?

Answer: Incremental backups only save changes since the last backup of any type, while differential backups save all changes since the last full backup

Incremental backups capture only changes since the last backup (full or incremental), using less storage but requiring more steps to restore. Differential backups capture all changes since the last full backup, using more storage but enabling faster restoration.

What is a Recovery Point Objective (RPO)?

Answer: The maximum acceptable amount of data loss measured in time

RPO defines the maximum period of data loss an organization can tolerate, determining how frequently backups should be performed.

Why should backup integrity be regularly tested?

Answer: To verify that backup data can be successfully restored when needed

Regular backup testing verifies that backup data is complete, uncorrupted, and can be successfully restored, ensuring the organization can actually recover from data loss events.

What type of malware specifically targets backup files to prevent data recovery?

Answer: Ransomware

Modern ransomware variants specifically seek out and encrypt or delete backup files to prevent victims from recovering their data without paying the ransom.

What is an air-gapped backup?

Answer: A backup stored on media that is physically disconnected from any network

An air-gapped backup is stored on media physically disconnected from all networks, making it immune to network-based attacks like ransomware.