VMCE Security and Immutability 4

Question 1

What does Veeam's Secure Restore feature do before mounting a restored VM to the production environment?

Accepted Answer

Scans restored VM content with an antivirus engine to detect malware before bringing the VM online

Answer

Secure Restore integrates with antivirus software to scan restored VM disks for malware, preventing reinfection of the production environment from a compromised backup.

Question 2

In the context of Veeam RBAC, which built-in role should be assigned to a user who only needs to initiate restore operations but should not be able to modify or delete backup jobs?

Accepted Answer

Veeam Restore Operator

Answer

The Veeam Restore Operator role grants permissions to perform restores without allowing modification of backup infrastructure or jobs.

Question 3

When immutability is enabled on a Scale-Out Backup Repository (SOBR) with an object storage extent, which component enforces immutability?

Accepted Answer

The object storage service's native object lock (e.g., S3 Object Lock)

Answer

When offloading to object storage, Veeam relies on the cloud provider's native object lock feature (such as S3 Object Lock) to enforce immutability on the capacity tier.

Question 4

What is the primary security reason for enabling MFA (multi-factor authentication) on the Veeam Backup & Replication console login?

Accepted Answer

To prevent unauthorized access to the VBR console even if credentials are stolen

Answer

MFA adds a second verification factor so that stolen credentials alone are insufficient for an attacker to gain access to the VBR management console.

Question 5

Which encryption algorithm does Veeam use to encrypt backup data when backup encryption is enabled?

Accepted Answer

AES-256

Answer

Veeam uses AES-256 encryption for backup data, which is the current industry standard for strong symmetric encryption.

(VMCE) Veeam Certified Engineer Practice Test

(VMCE) Veeam Certified Engineer Practice Test

VMCE Security and Immutability 4