Security and Immutability Flashcards
7 cards from real VMCE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security and Immutability flashcards as text
Which Veeam repository type natively supports immutability without requiring any additional third-party storage appliance?
Answer: Linux hardened repository with XFS
A Linux hardened repository using XFS with immutability enabled is Veeam's native immutable backup storage solution requiring no third-party appliance.
When configuring a hardened Linux repository, what is the minimum recommended approach for the service account used by Veeam?
Answer: Create a dedicated non-root account with limited sudo privileges
A dedicated non-root account with only the necessary sudo privileges reduces the attack surface on the hardened repository.
What happens to immutable backups in a Linux hardened repository when the immutability period expires?
Answer: They revert to mutable status and follow normal retention policies
Once the immutability period expires, backup files become mutable again and are subject to standard Veeam retention policies.
Which encryption mode in Veeam ensures that backup data stored on a repository is unreadable even if the physical media is stolen?
Answer: Storage-level encryption at rest
Storage-level (at-rest) encryption encrypts backup files on the repository, protecting data from physical media theft.
In Veeam's four-eyes authorization model, what is required before a protected configuration setting can be changed?
Answer: A second administrator must approve the change via a separate account
Four-eyes authorization requires a second authorized administrator to confirm sensitive configuration changes, preventing single-point compromise.
Which Veeam feature prevents ransomware from deleting or modifying backup files by making them read-only at the OS level for a defined period?
Answer: Immutability flag (chattr +i) on Linux hardened repository
Veeam uses the Linux 'chattr +i' immutability flag on XFS volumes to make backup files read-only at the OS level for the configured immutability window.
What is the purpose of the 'Make recent backups immutable for X days' setting in a Linux hardened repository configuration?
Answer: It sets the chattr +i flag on new backup files for X days, preventing modification or deletion
This setting applies the immutability flag to newly created backup files, ensuring they cannot be altered or deleted for the specified number of days.