CSCU Data Back Up 2 â Questions and Answers
Question 1: What is the difference between a full backup and a partial backup?
- Full backups are faster than partial backups
- A full backup copies all data regardless of changes, while partial backups (incremental or differential) only copy data that has changed (Correct answer)
- Partial backups are more reliable than full backups
- Full backups only copy system files
Correct answer: A full backup copies all data regardless of changes, while partial backups (incremental or differential) only copy data that has changed
A full backup creates a complete copy of all data every time it runs, while partial backups (incremental or differential) only copy data that has changed since the last full or last backup.
A full backup creates a complete copy of all selected data every time it runs, regardless of whether the data has changed since the last backup. This provides the simplest and fastest restoration process (only one backup set needed) but requires the most storage space and longest backup time. Partial backups come in two types: incremental backups copy only data that has changed since the last backup of any type, resulting in small, fast backups but requiring the last full backup plus all subsequent incrementals for restoration; differential backups copy all data changed since the last full backup, growing larger over time but requiring only the last full backup plus the most recent differential for restoration. Organizations typically combine these methodsâfor example, weekly full backups with daily incrementalsâbalancing storage costs, backup speed, and restoration requirements.
Question 2: Why is it important to store backup copies in a different physical location?
- Different locations have faster internet
- Offsite storage protects data from localized disasters such as fires, floods, or theft that could destroy both original data and local backups (Correct answer)
- Offsite storage makes backups smaller
- Different locations offer better power supply
Correct answer: Offsite storage protects data from localized disasters such as fires, floods, or theft that could destroy both original data and local backups
Offsite backup storage ensures that a catastrophic event at your primary location does not destroy both your original data and its backup simultaneously.
Storing backups at a different physical location from the original data is a critical data protection principle because localized disasters can destroy everything in a single location simultaneously. A fire, flood, earthquake, or even a targeted burglary could destroy both the primary data and any backups stored in the same building. Offsite storage options include cloud backup services (offering geographic redundancy across multiple data centers), a secondary office or facility, a bank safe deposit box for critical media, or a colocation facility. The 3-2-1 backup rule codifies this: keep 3 copies of data, on 2 different media types, with 1 copy offsite. For businesses, the offsite copy should be far enough away that a regional disaster (like a hurricane) cannot affect both locations. Modern cloud backup makes offsite storage accessible and affordable for both individuals and organizations.
Question 3: What is a backup retention policy?
- A policy that determines how fast backups are created
- A defined schedule that specifies how long different backup copies are kept before being deleted or overwritten (Correct answer)
- A rule about who can create backups
- A policy that limits the number of files that can be backed up
Correct answer: A defined schedule that specifies how long different backup copies are kept before being deleted or overwritten
A backup retention policy defines how long backup copies are maintained, balancing the need for historical data recovery against storage costs and compliance requirements.
A backup retention policy is a documented set of rules specifying how long different types of backup copies are retained before being deleted, overwritten, or archived. The policy must balance several factors: the need to recover data from various points in time (a file corrupted months ago may need an older backup), regulatory compliance requirements (some industries mandate years of data retention), storage costs (longer retention requires more storage), and legal discovery obligations (data may need to be preserved for litigation). A typical retention scheme might keep daily backups for 30 days, weekly backups for 3 months, monthly backups for 1 year, and annual backups for 7 years. The policy should also address: which data requires longer retention, when backups should be moved to cheaper archive storage, secure destruction of expired backups, and special holds for legal purposes. Without a clear retention policy, organizations either waste resources keeping unnecessary backups or risk losing data they may later need.
Question 4: What is continuous data protection (CDP)?
- Running antivirus software continuously
- A backup method that automatically saves every change to data as it occurs, enabling recovery to any point in time (Correct answer)
- Continuously monitoring data for viruses
- A type of firewall that protects data 24/7
Correct answer: A backup method that automatically saves every change to data as it occurs, enabling recovery to any point in time
CDP captures every change made to data in real time, creating a continuous journal that allows restoration to any point in time, not just the last scheduled backup.
Continuous Data Protection (CDP) is a backup approach that automatically captures and records every change made to data as it occurs, rather than at scheduled intervals. True CDP (also called real-time CDP) maintains a change journal that allows data to be restored to any arbitrary point in timeâdown to the exact second before a problem occurred. This provides near-zero RPO (Recovery Point Objective), meaning virtually no data loss. This contrasts with traditional backup which only captures data at scheduled intervals (daily, hourly), potentially losing all changes since the last backup. CDP works by monitoring data changes at the block or file level and continuously replicating them to a secondary location. Near-CDP solutions capture changes at frequent intervals (every few minutes) rather than truly in real time. CDP is particularly valuable for databases, financial systems, and any environment where even minimal data loss is unacceptable. The tradeoff is higher resource consumption and storage requirements compared to periodic backups.
Question 5: What should you consider when choosing a cloud backup provider?
- Only the price of the service
- Encryption standards, data center locations, compliance certifications, recovery capabilities, and the provider's data retention and privacy policies (Correct answer)
- The color scheme of their website
- How many employees the company has
Correct answer: Encryption standards, data center locations, compliance certifications, recovery capabilities, and the provider's data retention and privacy policies
Evaluating a cloud backup provider should consider encryption (in transit and at rest), data center locations for compliance, certifications, SLA guarantees, recovery speed, and privacy policies.
Selecting a cloud backup provider requires evaluating multiple critical factors: Encryptionâdoes the provider offer end-to-end encryption where only you hold the keys (zero-knowledge), or can the provider access your data? What encryption algorithms and key lengths are used? Data center locationsâwhere is your data physically stored, and does this comply with data residency regulations? Compliance certificationsâdoes the provider hold relevant certifications (SOC 2, ISO 27001, HIPAA, PCI DSS)? Recovery capabilitiesâwhat are the actual restore speeds, and can you test recovery? Does the provider offer granular file-level and full system recovery? Retention policiesâhow long are backups retained, and what happens to your data if you cancel service? Bandwidthâare there upload/download limits? Security practicesâdoes the provider have a history of breaches? Do they support MFA? Service Level Agreementsâwhat uptime guarantees and compensation are provided? Vendor lock-inâcan you easily export your data? A thorough evaluation across these dimensions ensures your backup solution meets both current and future needs.
Question 6: What is the risk of not testing your backup restoration process?
- Backup files become corrupted over time
- You may discover during an actual emergency that backups are incomplete, corrupted, or the restoration process fails, leaving you unable to recover critical data (Correct answer)
- Untested backups take longer to create
- Backup software licenses expire if not tested
Correct answer: You may discover during an actual emergency that backups are incomplete, corrupted, or the restoration process fails, leaving you unable to recover critical data
Without regular testing, backup failures, corruption, or procedural issues may go undetected until a real disaster occurs, when it is too late to fix them.
Failing to test backup restoration is one of the most common and devastating data protection mistakes. Organizations and individuals who never test their backups may encounter numerous problems only during an actual emergency: backup media may be physically damaged or degraded, backup data may be corrupted or incomplete due to software errors, encryption keys or passwords needed for restoration may be lost or unavailable, the restoration process may take far longer than expected (exceeding RTO), restored applications may not function due to configuration differences, backup software versions may be incompatible with current systems, and staff may not know how to perform the restoration procedure under pressure. Regular testing should include: full restoration drills at least quarterly, verification of data integrity (checksums, spot-checking files), measuring actual restoration time against RTO requirements, testing on different hardware to ensure portability, and documenting the restoration procedure. The time to discover backup problems is during a controlled test, not during a crisis.
What is the difference between a full backup and a partial backup?