VMCE Security and Immutability 3

Question 1

Which port must be open between the Veeam Backup & Replication server and a hardened Linux repository for management traffic?

Accepted Answer

TCP 9401

Answer

TCP 9401 is used for management communication between the VBR server and Linux-based repository components.

Question 2

When using Veeam with Object Storage as an immutable target (e.g., AWS S3 Object Lock), which lock mode should be used for the strongest ransomware protection?

Accepted Answer

Compliance mode

Answer

Compliance mode prevents any user, including root, from deleting or overwriting objects before the retention period expires, providing the strongest protection.

Question 3

What is the role of the 'Veeam Configuration Backup' from a security standpoint?

Accepted Answer

It preserves VBR server settings, job configurations, and encryption keys for disaster recovery

Answer

Configuration backup saves VBR server settings and optionally encryption keys, enabling full disaster recovery of the backup infrastructure itself.

Question 4

Which Veeam capability allows administrators to detect and alert on suspicious backup activity, such as unusually high data change rates that may indicate ransomware encryption?

Accepted Answer

Veeam ONE anomaly detection

Answer

Veeam ONE includes anomaly detection that monitors backup metrics and alerts on unusual change rates that may signal an active ransomware attack.

Question 5

In Veeam's security hardening guidance, why is it recommended to isolate the backup network from the production network?

Accepted Answer

To prevent ransomware or attackers on the production network from reaching backup infrastructure directly

Answer

Network isolation ensures that even if ransomware compromises production systems, it cannot directly communicate with or attack the backup infrastructure.

(VMCE) Veeam Certified Engineer Practice Test

(VMCE) Veeam Certified Engineer Practice Test

VMCE Security and Immutability 3