VMCE Veeam Certified Engineer Exam — Questions and Answers

Question 1: In a Scale-out Backup Repository (SOBR), what is the role of the 'Extents'?

They are the metadata databases for backup chains
They are the policies that define backup retention
They are individual storage systems that make up the SOBR pool (Correct answer)
They represent the proxy servers assigned to the SOBR

Correct answer: They are individual storage systems that make up the SOBR pool

Extents are the individual storage systems (simple repositories) that are combined into a Scale-out Backup Repository pool.

Question 2: Which port must be open between the Veeam Backup & Replication server and a hardened Linux repository for management traffic?

TCP 2500-3300
TCP 6180
TCP 9401 (Correct answer)
TCP 443

Correct answer: TCP 9401

TCP 9401 is used for management communication between the VBR server and Linux-based repository components.

Question 3: An engineer notices that Veeam ONE is showing stale data for a vSphere cluster. What is the most likely cause?

The Veeam ONE license has expired
The data collection service is stopped or experiencing errors (Correct answer)
The vCenter Server certificate has changed
The Veeam ONE database is full

Correct answer: The data collection service is stopped or experiencing errors

Stale data in Veeam ONE typically indicates that the data collection service has stopped or is encountering connectivity errors with the monitored infrastructure.

Question 4: Which Veeam feature allows a backup administrator to restore a VM to any point in time between scheduled backups using journal-based recovery?

Veeam DataLabs On-Demand Sandbox with continuous journal replay
Veeam Continuous Data Protection (CDP) with near-zero RPO replication using VMware vSphere APIs for I/O filtering (Correct answer)
Veeam Explorer for Storage Snapshots with sub-job scheduling
Veeam Instant Recovery with time-slider granular point-in-time selection

Correct answer: Veeam Continuous Data Protection (CDP) with near-zero RPO replication using VMware vSphere APIs for I/O filtering

Veeam CDP uses VMware vSphere APIs for I/O Filtering (VAIO) to capture every write to VM disks in real time, enabling recovery to any second within the retention window — far beyond scheduled backup granularity.

Question 5: A backup administrator wants to back up only changed blocks since the last backup using CBT (Changed Block Tracking). Which prerequisite must be met on VMware VMs?

VM hardware version must be 7 or higher and CBT must be enabled on the VM (Correct answer)
The backup proxy must be deployed as a virtual appliance (hotadd mode)
vCenter Server must be version 6.5 or later
vSphere Replication must be licensed

Correct answer: VM hardware version must be 7 or higher and CBT must be enabled on the VM

VMware CBT requires VM hardware version 7+ and the CBT flag to be enabled; Veeam enables it automatically on eligible VMs.

Question 6: What occurs when you select 'Undo Failover' in Veeam after a failover has been initiated?

The replica VM is deleted and a new replication cycle begins from scratch
The replica is rolled back to its pre-failover state and the original production VM is restored as primary (Correct answer)
The failover is committed and the production VM is permanently replaced
All replication restore points newer than the failover point are removed

Correct answer: The replica is rolled back to its pre-failover state and the original production VM is restored as primary

Undo Failover reverts the replica to its last replication state before the failover, discarding changes made while the replica was running, and allows replication to resume normally.

Question 7: An administrator uses Veeam's 'Staged Restore' feature. What is the primary purpose of this capability?

To validate backups automatically in a sandbox
To restore VMs in phases to reduce network bandwidth
To stage backups on a secondary repository before final restore
To run a script against a restored VM before it is published to production (Correct answer)

Correct answer: To run a script against a restored VM before it is published to production

Staged Restore mounts a VM from backup, allows running custom scripts (e.g., compliance scripts or data masking), and then optionally publishes it to production.

Question 8: Which Veeam repository option allows block-level deduplication and compression to be performed on the backup server before data is written to the repository?

Source-side deduplication (Correct answer)
Repository-side compression
Inline deduplication
Target-side deduplication

Correct answer: Source-side deduplication

Source-side deduplication processes and deduplicates data on the backup proxy/server before transmitting it to the repository, reducing network traffic.

Question 9: What is the role of the 'Veeam Configuration Backup' from a security standpoint?

It exports RBAC roles to Active Directory
It creates a snapshot of the Linux hardened repository
It preserves VBR server settings, job configurations, and encryption keys for disaster recovery (Correct answer)
It backs up all VM data to an encrypted offsite location

Correct answer: It preserves VBR server settings, job configurations, and encryption keys for disaster recovery

Configuration backup saves VBR server settings and optionally encryption keys, enabling full disaster recovery of the backup infrastructure itself.

Question 10: What Veeam ONE report would a compliance officer use to demonstrate that all VMs were protected according to backup policy over the past quarter?

Backup SLA Compliance report (Correct answer)
Backup Job Statistics report
Protected VMs History report
VM Recovery Points report

Correct answer: Backup SLA Compliance report

The Backup SLA Compliance report provides historical evidence that VMs met their defined backup policy requirements, making it ideal for compliance audits.

Question 11: What happens to replication restore points when the 'retain days' limit is exceeded?

Replication jobs pause until manual cleanup
Old restore points are merged into a single synthetic point
The oldest restore points are removed by Veeam automatically (Correct answer)
Veeam archives them to object storage automatically

Correct answer: The oldest restore points are removed by Veeam automatically

Veeam automatically removes the oldest replica restore points once the configured retention limit is reached, keeping the replica chain within the defined window.

Question 12: In a 3-2-1-1-0 backup rule as implemented by Veeam, what does the final '0' represent?

Zero backups stored without encryption
Zero backups older than one year
Zero unverified backups — all backups must pass automated recovery verification (Correct answer)
Zero recovery point objectives exceeded

Correct answer: Zero unverified backups — all backups must pass automated recovery verification

The '0' in the 3-2-1-1-0 rule means zero errors on restore verification — every backup must be tested and proven recoverable.

Question 13: In the context of Veeam RBAC, which built-in role should be assigned to a user who only needs to initiate restore operations but should not be able to modify or delete backup jobs?

Veeam Restore Operator (Correct answer)
Veeam Tape Operator
Veeam Backup Operator
Veeam Backup Administrator

Correct answer: Veeam Restore Operator

The Veeam Restore Operator role grants permissions to perform restores without allowing modification of backup infrastructure or jobs.

Question 14: What is the Guest Interaction Proxy (GIP) in Veeam Backup & Replication?

A component that acts as an intermediary to connect to guest VMs for application-aware processing and indexing tasks (Correct answer)
A hardware-based proxy for offloading VSS snapshot creation from the hypervisor
A Veeam component that handles all backup network traffic between backup servers
A dedicated appliance deployed inside each VM for continuous data protection

Correct answer: A component that acts as an intermediary to connect to guest VMs for application-aware processing and indexing tasks

The Guest Interaction Proxy (GIP) is a Veeam component that connects to guest VMs on behalf of the backup server to perform application-aware processing, guest OS indexing, and script execution.

Question 15: What happens to immutable backups in a Linux hardened repository when the immutability period expires?

They revert to mutable status and follow normal retention policies (Correct answer)
They are automatically archived to tape
They require manual administrator action to delete
They are automatically deleted by the Veeam server

Correct answer: They revert to mutable status and follow normal retention policies

Once the immutability period expires, backup files become mutable again and are subject to standard Veeam retention policies.

Question 16: When performing a Failover to a VM replica, what is the state of the original production VM?

It is automatically powered off by Veeam before failover
It is suspended and snapshotted by Veeam
It remains running unless you manually power it off (Correct answer)
It is deleted from the production site

Correct answer: It remains running unless you manually power it off

Veeam does not automatically power off the production VM during failover; the administrator must manually manage the production VM to avoid split-brain.

Question 17: An administrator sets up a Linux Hardened Repository with a 10-day immutability period. A backup job targeting this repository has a retention policy of 7 days. On day 8, after a backup chain is complete, what is the expected outcome when Veeam attempts to delete the backup files according to the job's retention policy?

The deletion will fail because the file system's immutable flag (`chattr +i`) prevents modification or deletion by any user, including root, until the 10-day period expires. (Correct answer)
Veeam will automatically remove the immutable flag to perform the deletion and then log the action.
The deletion will succeed because the Veeam retention policy is shorter than the immutability period.
The files will be moved to a temporary location until the immutability period expires, after which they will be permanently deleted.

Correct answer: The deletion will fail because the file system's immutable flag (`chattr +i`) prevents modification or deletion by any user, including root, until the 10-day period expires.

The Linux Hardened Repository leverages the `chattr +i` command to set an immutable flag at the file system level. This OS-level protection overrides the application-level retention policy, preventing any user—including the root user—from deleting or modifying the file until the immutability period has passed. Veeam's retention process will fail for these files and will only succeed after day 10.

Question 18: Which object storage provider integration in Veeam supports the S3 Object Lock feature for WORM (write-once-read-many) immutability?

Google Cloud Storage through lifecycle management rules exclusively
Wasabi Hot Cloud Storage via proprietary locking APIs
Microsoft Azure Blob Storage using access tiers only
Amazon S3 and S3-compatible storage that implements the S3 Object Lock API (Correct answer)

Correct answer: Amazon S3 and S3-compatible storage that implements the S3 Object Lock API

Veeam supports S3 Object Lock for immutability on Amazon S3 and any S3-compatible object storage that correctly implements the S3 Object Lock API.

Question 19: What is the purpose of the 'Health check' option in Veeam backup job settings?

It performs a test restore of the VM to an isolated network
It verifies the integrity of the latest restore point by reading and CRC-checking backup data blocks (Correct answer)
It runs a VSS consistency check on the backup proxy
It validates that the backup repository has sufficient free space

Correct answer: It verifies the integrity of the latest restore point by reading and CRC-checking backup data blocks

Health check reads backup data blocks and verifies their CRC checksums to detect silent data corruption in the backup chain.

Question 20: When adding VMs to a backup job using a container (e.g., a vSphere cluster), what happens by default when new VMs are added to that container?

New VMs trigger an immediate full backup cycle
New VMs are excluded until the job is recreated
New VMs must be manually added to the job
New VMs are automatically included in the next backup job run (Correct answer)

Correct answer: New VMs are automatically included in the next backup job run

Dynamic inclusion means Veeam automatically picks up new VMs added to a container object without manual job editing.

Question 21: A backup job is configured with the 'forever forward incremental' backup method and a retention policy of 14 days. What happens when a new restore point is created after the 14th restore point?

The entire backup chain is deleted and a new full backup is created.
The oldest incremental restore point is deleted without being merged.
A new active full backup is automatically created, starting a new chain.
The oldest incremental restore point is merged into the full backup file (.VBK). (Correct answer)

Correct answer: The oldest incremental restore point is merged into the full backup file (.VBK).

In a forever forward incremental chain, once the retention policy is met, Veeam merges the oldest incremental backup file (.VIB) into the full backup file (.VBK), advancing the full backup to a more recent point in time. This process avoids the need for periodic full backups.

Question 22: A backup job uses the forward incremental method with periodic active fulls. Over time, VMs have been removed from the job. An administrator notices that the active full backup file (VBK) on the repository is not shrinking in size, even though it now contains fewer VMs. What repository maintenance task should be performed to reclaim this unused space within the VBK file?

Edit the repository and reduce its capacity.
Run the "Compact full backup file" task. (Correct answer)
Run a health check on the backup job.
Perform a repository rescan.

Correct answer: Run the "Compact full backup file" task.

The "Compact full backup file" task is specifically designed to reclaim unused space within a VBK file. When VMs are removed from a job, their data blocks become obsolete but remain within the file. Compacting creates a new, smaller VBK file by copying only the data blocks belonging to the VMs that are still in the job, effectively removing the 'white space' left by the deleted VMs.

Question 23: What is the maximum recommended percentage of repository capacity that Veeam should use before triggering a warning by default?

70%
90%
80%
85% (Correct answer)

Correct answer: 85%

By default, Veeam warns administrators when repository free space drops to 10 GB or when capacity utilization reaches 85%.

Question 24: What is the maximum number of concurrent tasks a single Veeam Backup Proxy can handle by default, and what controls this setting?

It is automatically determined by vCenter based on available ESXi resources
It is set globally in the Veeam Backup Server options and applies to all proxies
It is fixed at 4 concurrent tasks and cannot be changed
The concurrent task limit is configurable per proxy (default 2), controlled in the Backup Proxy properties in the Veeam console (Correct answer)

Correct answer: The concurrent task limit is configurable per proxy (default 2), controlled in the Backup Proxy properties in the Veeam console

Each backup proxy has a configurable concurrent task limit (defaulting to 2) set in its properties, allowing administrators to tune performance based on available proxy resources.

Question 25: In Veeam Backup & Replication, what is the recommended approach when backing up VMs that host Microsoft SQL Server with transaction log backups configured?

Use a dedicated SQL Server backup agent instead of the VM backup job
Back up the SQL VM in crash-consistent mode only
Disable VSS to avoid conflicts with SQL Server's own VSS writer
Enable application-aware processing with log backup and specify the log backup frequency (Correct answer)

Correct answer: Enable application-aware processing with log backup and specify the log backup frequency

Application-aware processing with Veeam's SQL log backup integration allows both VM-level and transaction log backups from a single job configuration.

Question 26: A Veeam backup job is configured with GFS (Grandfather-Father-Son) retention. What do 'Father' restore points represent?

Daily restore points
Weekly full restore points (Correct answer)
Yearly full restore points
Monthly full restore points

Correct answer: Weekly full restore points

In GFS terminology, Father restore points are weekly fulls, Son restore points are daily, and Grandfather restore points are monthly.

Question 27: Which of the following is an example of cloud infrastructure?

Operating systems.
Servers, storage, and network hardware (Correct answer)
Backup software.
Virtualization software.

Correct answer: Servers, storage, and network hardware

Cloud infrastructure refers to the underlying physical and virtual components that support cloud computing. This typically includes physical servers, storage devices (like SANs or NAS), and networking hardware (routers, switches, firewalls) that are interconnected and managed to deliver computing resources as a service. Virtualization software runs on this hardware to create the virtualized environment that users interact with.

Question 28: Which Veeam service runs on the Veeam Backup Server and handles job scheduling and orchestration?

Veeam Installer Service
Veeam Backup Service (Correct answer)
Veeam Broker Service
Veeam Mount Service

Correct answer: Veeam Backup Service

The Veeam Backup Service is the core Windows service on the Backup Server that handles job scheduling, orchestration, and management tasks.

Question 29: Which Veeam component is responsible for processing data during a replication job at the target site?

Source-side proxy server
Veeam Enterprise Manager
Veeam Backup Server
Target-side proxy server (Correct answer)

Correct answer: Target-side proxy server

The target-side proxy server receives and writes replica data to the datastore at the DR site during a replication job.

Question 30: What is the purpose of the Veeam Installer Service deployed on managed servers?

It handles license file distribution
It installs backup agents on physical machines
It manages Windows patch deployment
It facilitates remote deployment and upgrade of Veeam components on managed servers (Correct answer)

Correct answer: It facilitates remote deployment and upgrade of Veeam components on managed servers

The Veeam Installer Service runs on managed servers to enable the Backup Server to remotely deploy, upgrade, or remove Veeam components.

Question 31: When planning DR for a multi-tier application (web, app, database tiers), what Veeam feature ensures all VMs are recovered in the correct boot sequence?

Failover Plans with configurable boot delays between groups (Correct answer)
Sure Backup with single VM mode
Veeam ONE alerts
Replication job scheduling

Correct answer: Failover Plans with configurable boot delays between groups

Failover Plans allow administrators to group VMs and define boot order with time delays between groups, ensuring database servers start before application servers and web tiers.

Question 32: A company has a production site with the network 192.168.1.0/24 and a DR site with the network 10.0.1.0/24. They are replicating a critical application server. To ensure the replica is accessible on the DR network after a failover, which replication job setting must be configured?

Network Mapping
Seeding
Replica Re-IP (Correct answer)
Traffic Encryption

Correct answer: Replica Re-IP

The Replica Re-IP feature allows an administrator to create rules that automatically change the IP address of a VM replica when it is powered on during a failover event. This is essential for ensuring the VM is functional and accessible on a different subnet at the disaster recovery site.

Question 33: What happens to the Veeam Backup Proxy role when no dedicated proxy is configured in the environment?

Veeam uses the vCenter Server as the proxy
Backups fail until a proxy is configured
The Backup Server itself acts as the default proxy (Correct answer)
A proxy is automatically deployed to the first ESXi host

Correct answer: The Backup Server itself acts as the default proxy

If no dedicated proxy is configured, the Veeam Backup Server automatically assumes the backup proxy role.

Question 34: A company has two main sites. Site A hosts the primary Veeam infrastructure and a Scale-Out Backup Repository (SOBR) for local backups. Site B has a simple backup repository. The administrator needs to configure a job that sends copies of backups from the SOBR in Site A to the repository in Site B for disaster recovery purposes. Which Veeam job type should be used?

A Backup Copy Job. (Correct answer)
A File Copy Job.
A Replication Job.
A SOBR Offload Job.

Correct answer: A Backup Copy Job.

A Backup Copy Job is the correct tool for this scenario. It is designed to read backup data from a source repository (like a SOBR) and copy it to a secondary repository, creating a separate, independent backup chain. This is a core component of adhering to the 3-2-1 rule for data protection.

Question 35: In Veeam replication, what is 'WAN Acceleration' primarily designed to optimize?

Encryption of replication data in transit
Deduplication and compression of replication traffic over a WAN link (Correct answer)
Scheduling of replication jobs across time zones
CPU usage on the source proxy during replication

Correct answer: Deduplication and compression of replication traffic over a WAN link

WAN Acceleration uses global deduplication and compression caching on both source and target WAN accelerators to significantly reduce data transferred over slow WAN links.

Question 36: Which retention policy type in a Veeam backup job retains restore points based on calendar days rather than a fixed count of restore points?

Simple retention (keep N restore points)
GFS (Grandfather-Father-Son) retention
Short-term retention with health check
Days-based retention policy (Correct answer)

Correct answer: Days-based retention policy

Days-based retention keeps all restore points created within a defined number of days, regardless of how many restore points that produces.

Question 37: Which Veeam feature lets you automate the execution of multiple failover steps — including VM power order, delays, and scripts — into a single orchestrated workflow?

Failover Plan (Correct answer)
Replication Job Schedule
Instant VM Recovery
SureReplica

Correct answer: Failover Plan

A Failover Plan in Veeam lets you define the order, delays, and scripts for powering on multiple replica VMs, providing orchestrated DR with a single-click execution.

Question 38: When a Veeam hardened Linux repository is configured, which SSH authentication method is recommended over password authentication?

Kerberos ticket-based authentication
LDAP-bound authentication via sssd
Certificate-based authentication via a CA
SSH public key authentication (Correct answer)

Correct answer: SSH public key authentication

SSH public key authentication is recommended because it eliminates password-based brute-force risks and is the standard for securing Linux server access.

Question 39: What is the role of the Veeam Backup & Replication 'Network Mapping' feature during failover?

It bridges production and DR VLANs for live migration
It automatically remaps replica VM network adapters to DR-site networks when the replica is powered on (Correct answer)
It maps vSphere port groups to Hyper-V virtual switches
It configures static routes on the DR network

Correct answer: It automatically remaps replica VM network adapters to DR-site networks when the replica is powered on

Network Mapping ensures that when a replica is powered on during failover, its NICs are connected to the correct DR-site networks rather than production networks.

Question 40: A planned failover is initiated for a critical VM replica. Which of the following actions does Veeam Backup & Replication perform FIRST?

It performs an incremental replication to synchronize the replica with the source VM. (Correct answer)
It powers off the source VM.
It creates a new restore point for the replica.
It redirects I/O operations from the source VM to the replica VM.

Correct answer: It performs an incremental replication to synchronize the replica with the source VM.

During a planned failover, Veeam's primary goal is to prevent data loss. Therefore, the first step is to perform an incremental replication to copy any changes from the source VM that have occurred since the last replication cycle to the replica. After this synchronization, it proceeds to shut down the source VM and then transfer operations to the replica.

Question 41: A backup job is configured with 'Forward incremental' backup mode and no synthetic or active full is scheduled. What will Veeam create after the initial full backup on subsequent runs?

A new full VBK each run
Reversed incremental VRB files
Delta VDI files merged into the VBK
Incremental VIB files referencing the last full (Correct answer)

Correct answer: Incremental VIB files referencing the last full

In forever-forward incremental mode, every subsequent run creates a VIB (incremental) file that references the original full VBK.

Question 42: When configuring a Scale-out Backup Repository, what is the role of the performance tier?

It stores long-term archive copies of backups on object storage
It replicates data to a secondary site for disaster recovery
It acts as the primary landing zone for new backups and restores (Correct answer)
It hosts the Veeam configuration database for high availability

Correct answer: It acts as the primary landing zone for new backups and restores

The performance tier in a SOBR serves as the primary storage layer where new backups are initially written and from which fast restores are performed.

Question 43: Which encryption algorithm does Veeam use to encrypt backup data when backup encryption is enabled?

RSA-2048
3DES-168
ChaCha20-Poly1305
AES-256 (Correct answer)

Correct answer: AES-256

Veeam uses AES-256 encryption for backup data, which is the current industry standard for strong symmetric encryption.

Question 44: A Veeam administrator wants to move a backup repository extent out of a Scale-out Backup Repository without losing any backup data. What is the correct procedure?

Switch the extent to maintenance mode, evacuate backups to other extents, then remove it from the SOBR (Correct answer)
Disable the SOBR, copy files manually, and recreate the SOBR without the extent
Simply remove the extent from the SOBR GUI; Veeam automatically redistributes the data
Delete the extent from the SOBR settings and re-add it as a standalone repository

Correct answer: Switch the extent to maintenance mode, evacuate backups to other extents, then remove it from the SOBR

Placing the extent into maintenance mode triggers automatic evacuation of backup files to other extents in the SOBR before the extent can be safely removed.

Question 45: When performing Instant VM Recovery, where does the VM actually run during the recovery process?

On the Veeam Backup & Replication server itself
Directly from the backup repository storage via NFS/iSCSI mount (Correct answer)
From a restored copy on the production datastore
On a temporary cloud instance provisioned automatically

Correct answer: Directly from the backup repository storage via NFS/iSCSI mount

Instant VM Recovery boots the VM directly from the compressed backup file by mounting the repository as a datastore to the ESXi host.

Question 46: A service provider wants to offer Backup-as-a-Service (BaaS) to its tenants, allowing them to send backups to a shared, multi-tenant cloud repository. Which Veeam component is essential for the service provider to deploy?

Veeam Agent for Windows
Scale-out Backup Repository
Veeam Cloud Connect (Correct answer)
Veeam Backup Enterprise Manager

Correct answer: Veeam Cloud Connect

Veeam Cloud Connect is the technology that enables service providers to offer Veeam-powered Backup-as-a-Service (BaaS) and Disaster-Recovery-as-a-Service (DRaaS). It provides the necessary multi-tenant architecture to securely host backup data for multiple customers.

Question 47: Which Veeam ONE dashboard widget shows the current protection status of all VMs in the infrastructure?

Protected Infrastructure widget
Backup SLA widget
VM Protection widget (Correct answer)
Backup Job Status widget

Correct answer: VM Protection widget

The VM Protection widget in Veeam ONE dashboards displays the current backup protection status of all virtual machines.

Question 48: When configuring a Veeam replication job, what does the 'Source proxy' setting control?

The compression level applied before data leaves the source site
Which Veeam server reads data from the source VM and sends it toward the target (Correct answer)
The scheduling priority of the replication job at the source
Which credentials are used to authenticate to the source hypervisor

Correct answer: Which Veeam server reads data from the source VM and sends it toward the target

The Source proxy is the Veeam component that reads VM data from the source datastore and transmits it (directly or via WAN accelerator) to the target proxy at the DR site.

Question 49: When configuring email notifications in Veeam ONE, what must be configured first?

SNMP trap receiver
SMTP server settings (Correct answer)
Syslog server
REST API endpoint

Correct answer: SMTP server settings

SMTP server settings must be configured in Veeam ONE before email notifications can be sent for alarms.

Question 50: A VM has been successfully failed over to its replica. The administrator has tested the replica and confirmed it is fully functional. What is the final step to permanently switch production to the replica and re-establish the replication job to protect the now-active replica?

Permanent Failover (Correct answer)
Undo Failover
Commit Failback
Planned Failover

Correct answer: Permanent Failover

Permanent Failover is the correct action to finalize the transition to the replica VM. This operation stops the original replication job, permanently moves all operations to the replica, and effectively makes the replica the new source VM. You can then create a new replication job to protect this new source VM. 'Commit Failback' is used after a failback to the original VM, not a permanent failover. 'Undo Failover' discards changes and powers off the replica. 'Planned Failover' is an initial action, not a finalization step.

Question 51: Which RPO scenario would best suit Veeam VM replication compared to standard backup jobs?

RPO of weeks for archival purposes
RPO of minutes requiring near-synchronous data protection (Correct answer)
RPO of months for compliance retention
RPO of 24 hours with nightly backup windows

Correct answer: RPO of minutes requiring near-synchronous data protection

VM replication supports very frequent replication intervals (as low as minutes), making it ideal for aggressive RPO targets that standard backup jobs cannot meet.

Question 52: What is the purpose of the Veeam Data Mover service running on a repository server?

It manages repository capacity and triggers alerts when thresholds are exceeded
It transfers data between source and target components during backup and restore jobs (Correct answer)
It compresses and deduplicates backup data before writing to disk
It schedules backup jobs and maintains the Veeam configuration database

Correct answer: It transfers data between source and target components during backup and restore jobs

The Veeam Data Mover is a runtime process that handles data transfer between infrastructure components such as source hosts and backup repositories.

Question 53: In Veeam, which feature allows a backup job to exclude specific VM disks (e.g., a data drive) from being backed up?

Backup proxy disk filter
Excluded disks configuration under VM processing settings (Correct answer)
Repository exclusion rules
VM exclusion list at the job level

Correct answer: Excluded disks configuration under VM processing settings

Per-VM disk exclusion settings let administrators omit specific virtual disks from backup to save space or meet policy requirements.

Question 54: What happens when a Veeam backup repository runs out of free space during an active backup job?

Veeam pauses the job and waits up to 24 hours for space to be freed before failing
Veeam automatically removes the oldest restore point from that repository to free space
The job fails with an insufficient space error and the incomplete backup file is deleted (Correct answer)
The job completes partially and marks the backup chain as corrupted

Correct answer: The job fails with an insufficient space error and the incomplete backup file is deleted

When a repository exhausts its free space mid-job, the job fails with an error and Veeam removes the incomplete backup file to avoid leaving a corrupt chain.

Question 55: In a distributed environment with multiple Veeam Backup & Replication servers across different sites, which component provides a single, consolidated web-based console for centralized management, reporting, and federated restore capabilities?

Veeam Cloud Connect
Veeam ONE Reporter
Veeam Backup & Replication Console
Veeam Backup Enterprise Manager (Correct answer)

Correct answer: Veeam Backup Enterprise Manager

Veeam Backup Enterprise Manager is an optional component designed for managing multiple backup servers from a single web interface. It provides a centralized view for reporting, managing jobs, and performing restores across the entire distributed backup infrastructure.

Question 56: In Veeam's Scale-out Backup Repository (SOBR), what is the purpose of the 'Performance Tier'?

Deduplication appliance integration
Fast initial backup landing zone using high-performance extents (Correct answer)
Tape rotation management
Long-term archival to object storage

Correct answer: Fast initial backup landing zone using high-performance extents

The Performance Tier consists of high-performance extents that serve as the landing zone for new backups before optional tiering to Capacity Tier.

Question 57: What credentials are required for Veeam to perform application-aware processing on a guest VM?

Domain administrator credentials for the entire Active Directory domain
Guest OS credentials with local administrator privileges on the VM (Correct answer)
Only backup repository service account credentials
Only vCenter or ESXi host credentials

Correct answer: Guest OS credentials with local administrator privileges on the VM

Veeam requires guest OS credentials with local administrator privileges to inject its runtime components into the guest OS and coordinate VSS processing.

Question 58: In Veeam's Virtual Appliance (HotAdd) transport mode, where is the backup proxy deployed?

On the Veeam Backup Server itself
On a physical server with direct SAN access
On a dedicated NFS appliance
As a VM running on the same ESXi host as the backed-up VMs (Correct answer)

Correct answer: As a VM running on the same ESXi host as the backed-up VMs

In HotAdd mode, the proxy is a VM on the same ESXi host, allowing VMware SCSI HotAdd to attach source VM disks directly for data reading.

Question 59: Where does Veeam create a VM snapshot during a backup job using VMware vSphere?

On the vCenter Server database as a logged checkpoint
On the backup proxy server to capture the VM state at job start
On the ESXi host using vSphere VADP API to quiesce and freeze the VM disk I/O (Correct answer)
On the backup repository as a metadata-only snapshot reference

Correct answer: On the ESXi host using vSphere VADP API to quiesce and freeze the VM disk I/O

Veeam triggers a VMware snapshot via VADP on the ESXi host to capture a consistent point-in-time state of the VM disks before reading data.

Question 60: What Veeam feature allows administrators to instantly recover individual application items from a VM backup without mounting the full VM?

Veeam vPower NFS with application-aware mount filtering
Application-Aware Image Processing (AAIP) combined with Explorer tools (Veeam Explorer for Exchange, SQL, etc.) (Correct answer)
Veeam Instant VM Recovery with application filtering
Veeam Multi-OS Guest File Recovery with application layer parsing

Correct answer: Application-Aware Image Processing (AAIP) combined with Explorer tools (Veeam Explorer for Exchange, SQL, etc.)

Veeam Explorers (for Exchange, SQL Server, SharePoint, etc.) work with AAIP-processed backups to enable item-level recovery of emails, databases, documents, and other application objects.

VMCE Veeam Certified Engineer Exam

The VMCE (Veeam Certified Engineer) Exam validates expertise in designing, deploying, and managing Veeam Backup & Replication solutions, covering backup and replication architecture, virtualization and cloud infrastructure, data recovery and disaster recovery planning, repository and storage management, security and immutability, and monitoring and reporting.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds