Security and Immutability Flashcards
7 cards from real VMCE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security and Immutability flashcards as text
What does Veeam's Secure Restore feature do before mounting a restored VM to the production environment?
Answer: Scans restored VM content with an antivirus engine to detect malware before bringing the VM online
Secure Restore integrates with antivirus software to scan restored VM disks for malware, preventing reinfection of the production environment from a compromised backup.
In the context of Veeam RBAC, which built-in role should be assigned to a user who only needs to initiate restore operations but should not be able to modify or delete backup jobs?
Answer: Veeam Restore Operator
The Veeam Restore Operator role grants permissions to perform restores without allowing modification of backup infrastructure or jobs.
When immutability is enabled on a Scale-Out Backup Repository (SOBR) with an object storage extent, which component enforces immutability?
Answer: The object storage service's native object lock (e.g., S3 Object Lock)
When offloading to object storage, Veeam relies on the cloud provider's native object lock feature (such as S3 Object Lock) to enforce immutability on the capacity tier.
What is the primary security reason for enabling MFA (multi-factor authentication) on the Veeam Backup & Replication console login?
Answer: To prevent unauthorized access to the VBR console even if credentials are stolen
MFA adds a second verification factor so that stolen credentials alone are insufficient for an attacker to gain access to the VBR management console.
Which encryption algorithm does Veeam use to encrypt backup data when backup encryption is enabled?
Answer: AES-256
Veeam uses AES-256 encryption for backup data, which is the current industry standard for strong symmetric encryption.
A hardened Linux repository should NOT have which of the following installed to reduce its attack surface?
Answer: X Window System (GUI) and unnecessary packages
GUI environments and unnecessary packages expand the attack surface; a hardened repository should run a minimal OS with only required components installed.
What is the effect of enabling 'Encrypt backup traffic' in a Veeam job targeting a remote repository over a WAN link?
Answer: It encrypts backup data in transit between the source and repository using TLS
Enabling backup traffic encryption secures data in transit with TLS, protecting backup streams from interception on untrusted networks like the internet.