VMCE Security and Immutability 2

Question 1

Which Veeam repository type natively supports immutability without requiring any additional third-party storage appliance?

Accepted Answer

Linux hardened repository with XFS

Answer

A Linux hardened repository using XFS with immutability enabled is Veeam's native immutable backup storage solution requiring no third-party appliance.

Question 2

When configuring a hardened Linux repository, what is the minimum recommended approach for the service account used by Veeam?

Accepted Answer

Create a dedicated non-root account with limited sudo privileges

Answer

A dedicated non-root account with only the necessary sudo privileges reduces the attack surface on the hardened repository.

Question 3

What happens to immutable backups in a Linux hardened repository when the immutability period expires?

Accepted Answer

They revert to mutable status and follow normal retention policies

Answer

Once the immutability period expires, backup files become mutable again and are subject to standard Veeam retention policies.

Question 4

Which encryption mode in Veeam ensures that backup data stored on a repository is unreadable even if the physical media is stolen?

Accepted Answer

Storage-level encryption at rest

Answer

Storage-level (at-rest) encryption encrypts backup files on the repository, protecting data from physical media theft.

Question 5

In Veeam's four-eyes authorization model, what is required before a protected configuration setting can be changed?

Accepted Answer

A second administrator must approve the change via a separate account

Answer

Four-eyes authorization requires a second authorized administrator to confirm sensitive configuration changes, preventing single-point compromise.

(VMCE) Veeam Certified Engineer Practice Test

(VMCE) Veeam Certified Engineer Practice Test

VMCE Security and Immutability 2