Practice Test Geeks(VMCE) Veeam Certified Engineer Practice Test
← All VMCE Flashcard Decks

Security and Immutability Flashcards

7 cards from real VMCE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security and Immutability flashcards as text

  1. When a Veeam hardened Linux repository is configured, which SSH authentication method is recommended over password authentication?

    Answer: SSH public key authentication

    SSH public key authentication is recommended because it eliminates password-based brute-force risks and is the standard for securing Linux server access.

  2. Which Veeam feature allows you to verify that a backup is actually recoverable by automatically booting the VM in an isolated environment and running tests?

    Answer: SureBackup with DataLabs

    SureBackup uses DataLabs to automatically boot backed-up VMs in an isolated virtual lab and run configurable verification tests to confirm recoverability.

  3. In a 3-2-1-1-0 backup rule as implemented by Veeam, what does the final '0' represent?

    Answer: Zero unverified backups — all backups must pass automated recovery verification

    The '0' in the 3-2-1-1-0 rule means zero errors on restore verification — every backup must be tested and proven recoverable.

  4. Which setting prevents the Veeam Backup & Replication service account from being used interactively to log into Windows servers, reducing lateral movement risk?

    Answer: Deny local logon and remote desktop rights to the service account via Group Policy

    Denying interactive logon rights to the VBR service account via Group Policy prevents attackers who steal the account from using it to pivot to other systems.

  5. What is the consequence of losing the encryption password for an encrypted Veeam backup if no password hint or key recovery option was configured?

    Answer: The backup data is permanently inaccessible and cannot be recovered

    AES-256 encrypted backups without a recoverable key or password hint are permanently inaccessible — Veeam has no backdoor to decrypt them.

  6. Which Veeam component acts as a centralized password management store that can recover encryption keys from multiple VBR servers in an enterprise environment?

    Answer: Veeam Backup Enterprise Manager

    Veeam Backup Enterprise Manager can store encryption key hints and enable password recovery across multiple VBR servers when configured before data loss occurs.

  7. When configuring immutability on a Linux hardened repository, which filesystem must be used to support the immutability flag?

    Answer: XFS

    Veeam's Linux hardened repository immutability feature requires XFS as the underlying filesystem to support the chattr +i immutability flag correctly.