VMCE Security and Immutability Questions and Answers

Question 1

An administrator sets up a Linux Hardened Repository with a 10-day immutability period.
A backup job targeting this repository has a retention policy of 7 days.
On day 8, after a backup chain is complete, what is the expected outcome when Veeam attempts to delete the backup files according to the job's retention policy?

Accepted Answer

The deletion will fail because the file system's immutable flag (`chattr +i`) prevents modification or deletion by any user, including root, until the 10-day period expires.

Answer

The deletion will succeed because the Veeam retention policy is shorter than the immutability period.

Answer

Veeam will automatically remove the immutable flag to perform the deletion and then log the action.

Answer

The files will be moved to a temporary location until the immutability period expires, after which they will be permanently deleted.

Question 2

When configuring a Scale-Out Backup Repository (SOBR) Capacity Tier with Amazon S3, which native S3 feature must be enabled on the bucket beforehand to support Veeam's immutability functionality?

Accepted Answer

S3 Object Lock

Answer

S3 Glacier Deep Archive

Answer

S3 Cross-Region Replication

Answer

S3 Versioning

Question 3

An administrator is enabling encryption for a new backup job to protect data at rest. Which of the following is a critical consequence of losing the encryption password?

Accepted Answer

If the password is lost and no password loss protection mechanism (like Veeam Backup Enterprise Manager) is in place, the data within the encrypted backup files is permanently unrecoverable.

Answer

The password can be reset from the target repository's host operating system.

Answer

Restore operations can proceed without the password, but job modifications will be blocked.

Answer

Veeam support can provide a universal key to decrypt the backup files after identity verification.

Question 4

A critical VM was compromised by a virus. An administrator must restore it from a backup created before the infection, but they need to ensure the restored VM does not re-introduce the virus to the production network. Which Veeam feature is specifically designed to address this scenario?

Accepted Answer

Secure Restore

Answer

Instant VM Recovery to an isolated vSwitch

Answer

Staged Restore

Answer

SureBackup

Question 5

A company must archive backups for 10 years to meet compliance regulations, ensuring the data cannot be altered or deleted during this period. Which technology, when used in a Veeam tape job, provides hardware-enforced immutability?

Accepted Answer

WORM (Write Once, Read Many) Tapes

Answer

GFS Media Pools

Answer

Tape Encryption

Answer

LTO-9 Tapes

Question 6

A backup job targeting a Linux Hardened Repository uses a forward incremental chain. The repository is configured with a 15-day immutability period. What happens when Veeam attempts to perform a synthetic full or merge operation on backup files that are 10 days old?

Accepted Answer

The operation fails because the backup files (VBK and VIBs) are marked as immutable and cannot be modified or merged.

Answer

The operation is queued and will execute automatically after the 15-day immutability period expires.

Answer

The operation succeeds, as synthetic operations are considered metadata changes and are exempt from immutability.

Answer

A new active full backup is created automatically, and the old, immutable chain is left in place.