I85PREP
⌘ K
Dell Data Protection Foundations study materials
Dell Data Protection Foundations study resources

Dell Data Protection Foundations practice questions

One question at a time. Build your Dell Data Protection Foundations understanding.

First 50 of 199 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Data Protection Concepts and Challenges

In data protection, what does the recovery point objective (RPO) of a workload define?

  1. The maximum acceptable time a workload may remain unavailable after a failure
  2. The number of full backups retained before older copies are expired
  3. The physical distance required between primary and secondary data centers
  4. The maximum acceptable amount of data, measured in time, that may be lost in an outage Correct answer.

Explanation

The RPO expresses tolerance for data loss, expressed as the age of the most recent recoverable copy at the moment of failure. It drives backup and replication frequency, because data written after the last protected point cannot be recovered. RTO, by contrast, describes tolerable downtime rather than lost data.

Question 2Data Protection Concepts and Challenges

A storage administrator needs immutable copies that ransomware cannot encrypt or delete through normal credentials. Which control most directly provides this?

  1. Object lock with a retention period in compliance mode Correct answer.
  2. Volume-level snapshots taken every hour
  3. Role-based access control on the backup server
  4. Tape rotation with weekly offsite transfer

Explanation

Compliance-mode object lock prevents deletion or modification of protected objects until the retention period expires, even for privileged accounts. Snapshots, tape, and RBAC all reduce risk but remain administratively reversible. Only a retention lock enforces immutability at the storage layer.

Question 3Data Protection Concepts and Challenges

Which statement best distinguishes a backup from an archive?

  1. A backup is always stored on tape, while an archive is always stored on disk
  2. A backup is encrypted, while an archive is stored in clear text for accessibility
  3. A backup is taken by the storage team, while an archive is taken by the application owner
  4. A backup supports operational recovery of recent state, while an archive retains fixed content for long-term reference Correct answer.

Explanation

Backups exist to restore systems and data to a recent operational state after loss or corruption, so they are refreshed frequently. Archives preserve a defined, often unchanging record set for regulatory or historical retrieval over years. Media type and ownership do not define either function.

Question 4Data Protection Concepts and Challenges

An organization replicates data asynchronously to a secondary site 500 km away. What is the primary protection benefit of this design?

  1. Elimination of the need for any local backup copies
  2. Recovery from a regional disaster that destroys the primary site Correct answer.
  3. Reduced primary storage capacity requirements
  4. Guaranteed zero data loss for every committed transaction

Explanation

Geographically separated replication provides a survivable copy when an entire site is lost to fire, flood, or regional outage. Because replication is asynchronous, some recent writes may be missing at the remote site, so zero data loss is not assured. Local backups are still needed for logical corruption and file-level recovery.

Question 5Data Protection Concepts and Challenges

What is the main risk of relying solely on RAID within a single array as a data protection strategy?

  1. It encrypts data in a way that prevents restoration
  2. It cannot rebuild a failed disk without downtime for the entire array
  3. It protects against disk failure but not against site loss, corruption, or accidental deletion Correct answer.
  4. It requires tape libraries to function as a parity store

Explanation

RAID provides availability against media failure by keeping redundancy inside one system. It does not create an independent copy, so a fire, array-level corruption, ransomware, or operator error removes both data and parity together. Independent backup copies are required for those scenarios.

Question 6Data Protection Concepts and Challenges

Which factor most directly determines how often an incremental backup should be scheduled?

  1. The recovery point objective approved for the data Correct answer.
  2. The recovery time objective approved for the data
  3. The compression ratio achieved by the backup software
  4. The number of tape drives in the library

Explanation

Backup frequency sets the age of the newest recoverable copy, which is exactly what the RPO measures. A tighter RPO therefore demands more frequent protection cycles. RTO influences restore speed and method, not the interval between copies.

Question 7Data Protection Concepts and Challenges

What distinguishes a differential backup from an incremental backup?

  1. A differential always copies the entire data set, while an incremental copies only metadata
  2. A differential requires no full backup, while an incremental requires one
  3. A differential captures changes since the last differential, while an incremental captures all changes since the last full
  4. A differential captures all changes since the last full backup, while an incremental captures changes since the most recent backup of any type Correct answer.

Explanation

A differential always references the last full backup, so each successive differential grows larger but restore needs only the full plus the latest differential. An incremental references the previous backup of any kind, keeping each run small but lengthening the restore chain. This trade-off between backup window and restore complexity is the core distinction.

Question 8Data Protection Concepts and Challenges

An administrator must restore a file server after a site-wide power event. Which metric describes the acceptable elapsed time before the service is usable again?

  1. Recovery point objective
  2. Retention period
  3. Backup window
  4. Recovery time objective Correct answer.

Explanation

The recovery time objective states the maximum tolerable duration of an outage, so it governs restore speed and architecture choices such as standby systems. The recovery point objective addresses acceptable data loss instead. Retention and backup window describe policy duration and scheduling, not outage tolerance.

Question 9Data Protection Concepts and Challenges

Why does the 3-2-1 rule recommend keeping one copy offsite?

  1. To satisfy the requirement that copies use different media types
  2. To survive an event that destroys the primary location and all media within it Correct answer.
  3. To improve backup throughput by using remote network links
  4. To reduce licensing costs for backup software

Explanation

An offsite copy is the only one likely to survive fire, flood, theft, or regional outage affecting the primary data center. The rule's other elements address copy count and media diversity, not location. Offsite placement is specifically about geographic separation of risk.

Question 10Data Protection Concepts and Challenges

A recovery test shows that restoring a database takes 14 hours, but the approved RTO is 6 hours. Which action best closes the gap?

  1. Enable compression on the backup storage target
  2. Extend the retention period of the backup copies
  3. Increase the backup frequency from daily to hourly
  4. Introduce a warm standby or faster restore mechanism that shortens time to service Correct answer.

Explanation

The measured restore duration exceeds the RTO, so the remedy must reduce time to service, for example through standby replicas, faster media, or automated recovery. Increasing backup frequency improves the RPO, not the restore duration. Retention and compression do not change how long recovery takes.

Question 11Data Protection Concepts and Challenges

Which data protection challenge is specific to virtualized environments with many virtual machines on shared datastores?

  1. Virtual disks cannot be deduplicated
  2. Backup jobs can create I/O contention and latency spikes on shared storage Correct answer.
  3. Virtual machines cannot be backed up without shutting them down
  4. Snapshots of virtual machines always require physical tape

Explanation

Consolidating many workloads onto shared datastores means backup reads and snapshot consolidation compete with production I/O, causing latency. Protection tools therefore use changed block tracking, off-host proxies, and throttling. Live backup is supported, and virtual disks are routinely deduplicated.

Question 12Data Protection Concepts and Challenges

What is the primary purpose of a disaster recovery plan's recovery tier classification?

  1. To rank applications by business criticality so recovery resources are allocated appropriately Correct answer.
  2. To determine which operating systems the backup agent supports
  3. To group servers by their physical rack location
  4. To assign backup media to individual administrators

Explanation

Tiering maps applications to criticality and therefore to RTO, RPO, and investment levels, ensuring the most important services recover first. It is a business-driven prioritization exercise rather than an inventory or media task. Rack location and OS support are unrelated to recovery priority.

Question 13Data Protection Concepts and Challenges

A company keeps 30 daily backups, 12 monthly backups, and 7 yearly backups. Which term describes this scheme?

  1. Continuous data protection
  2. Synthetic full backup
  3. Grandfather-father-son rotation Correct answer.
  4. Snapshot cloning

Explanation

A generational rotation keeps recent daily copies alongside longer-lived weekly or monthly and yearly copies, traditionally called grandfather-father-son. Continuous data protection captures every write rather than scheduled generations. Synthetic fulls and clones are construction methods, not retention schemes.

Question 14Data Protection Concepts and Challenges

Why is restoring from a long incremental chain riskier than restoring from a full plus one differential?

  1. Incremental backups cannot be verified after they are written
  2. Differential backups never require the original full backup
  3. Every incremental in the chain must be intact and applied in order, so one damaged piece breaks recovery Correct answer.
  4. Incremental backups are always unencrypted and therefore exposed

Explanation

An incremental restore depends on the full and each subsequent incremental, so any missing or corrupt link prevents a complete recovery. A differential restore needs only the full and the latest differential, reducing dependency depth. This is why many environments periodically synthesize new fulls.

Question 15Data Protection Concepts and Challenges

Which challenge is most characteristic of protecting data spread across public cloud, on-premises, and SaaS applications?

  1. Loss of the ability to use object storage
  2. Inability to encrypt data in any of these environments
  3. Fragmented visibility and inconsistent policy across environments Correct answer.
  4. Prohibition of backup software in public cloud

Explanation

Hybrid and multi-cloud estates scatter data across platforms with different native tools, identities, and retention models, so consistent policy and centralized visibility become the hard problem. Encryption and object storage are available in all these environments. The difficulty is governance and operational consistency, not missing capability.

Question 16Data Protection Concepts and Challenges

What does data deduplication accomplish in a backup repository?

  1. It encrypts segments so identical blocks appear different
  2. It spreads data across sites for geographic redundancy
  3. It stores unique data segments once and references them for subsequent copies Correct answer.
  4. It compresses each file independently using a fixed algorithm

Explanation

Deduplication identifies repeated segments, stores one instance, and points later occurrences at it, which sharply reduces capacity for workloads with repeated content. Compression reduces the size of each segment but still stores every copy. Encryption and replication address confidentiality and resilience, not capacity reuse.

Question 17Data Protection Concepts and Challenges

An administrator wants to verify that a backup is recoverable without overwriting production data. Which practice is most appropriate?

  1. Confirm that the backup catalog contains the expected entries
  2. Review the retention policy assigned to the backup set
  3. Perform a test restore to an isolated environment and validate the recovered data Correct answer.
  4. Check that the backup job status reports success

Explanation

Only an actual restore proves that the data and its dependencies can be recovered, and an isolated target prevents impact on production. Job success and catalog entries show that data was written, not that it is usable. Retention review is a policy check with no bearing on recoverability.

Question 18Data Protection Concepts and Challenges

Which threat does an air-gapped copy primarily mitigate that an online replicated copy does not?

  1. A disk failure inside the primary storage array
  2. Accidental deletion of a single file by an end user
  3. An attacker with domain administrator rights destroying all connected copies Correct answer.
  4. Network latency between data centers

Explanation

An air gap removes the network path an attacker or malware could use to reach and destroy the copy, which matters when privileged credentials are compromised. Disk failure and single-file deletion are handled by any redundant or versioned copy. Latency is a performance concern, not a threat.

Question 19Data Protection Concepts and Challenges

What is the role of a backup catalog?

  1. It schedules jobs according to the retention policy
  2. It records metadata about backup sets so specific data can be located and restored Correct answer.
  3. It enforces encryption keys for the repository
  4. It stores the actual backup payload on tape media

Explanation

The catalog is an index of what was backed up, when, from where, and on which media, enabling fast selection during restore. The payload resides on the backup target or media. Keys and scheduling are handled by separate components. Losing the catalog can make intact backups practically unusable.

Question 20Data Protection Concepts and Challenges

Which situation best demonstrates logical corruption rather than physical media failure?

  1. A power supply failure takes down a storage controller
  2. An application writes malformed records that are then replicated to the standby copy Correct answer.
  3. A disk in the RAID set stops responding and is rebuilt from parity
  4. A tape drive reports repeated read errors during restore

Explanation

Logical corruption is bad data produced by software or user action, and replication faithfully copies it, so the standby is also affected. Physical failures involve hardware such as disks, drives, or controllers. This distinction is why point-in-time backups are needed even when replication is in place.

Question 21Data Protection Concepts and Challenges

Why do many organizations encrypt backup data at rest in addition to encrypting production data?

  1. Encryption doubles the effective capacity of the backup repository
  2. Backup media and repositories often leave the controlled data center and may be handled by fewer controls Correct answer.
  3. Encryption removes the need for access controls on the backup server
  4. Encryption guarantees that backups can be restored without keys

Explanation

Backup copies are frequently transported offsite, stored in cloud buckets, or accessed by operations staff, so they need their own confidentiality protection. Encryption does not increase capacity, replace access control, or simplify restore. In fact, key loss can make backups unrecoverable, so key management is critical.

Question 22Data Protection Concepts and Challenges

A business unit asks for a 15-minute RPO on a database that currently receives nightly full backups. What is the most appropriate first step?

  1. Move the database to a slower storage tier to reduce load
  2. Disable transaction logging to simplify the backup process
  3. Assess whether continuous or frequent incremental protection can meet the target within cost and impact limits Correct answer.
  4. Shorten the retention period so backups run faster

Explanation

A 15-minute RPO requires protection far more frequent than nightly, such as log shipping, continuous protection, or frequent incrementals, and the cost and production impact must be evaluated. Retention changes do not affect RPO. Removing transaction logs would actually make point-in-time recovery impossible.

Question 23Data Protection Concepts and Challenges

Which practice best addresses the risk of ransomware encrypting backup data through compromised backup credentials?

  1. Consolidating all backup roles into the domain administrator account
  2. Separate immutable copies protected by retention lock and distinct credentials Correct answer.
  3. Relying on RAID 6 within the backup repository
  4. Storing the only copy on a mapped network drive

Explanation

Isolating protected copies with immutability and separate identity boundaries prevents an attacker who owns production credentials from reaching them. Consolidating privileges increases blast radius, and a mapped drive is easily encrypted. RAID protects against disk failure, not malicious overwrite.

Question 24Data Protection Concepts and Challenges

What does a service level agreement for data protection typically specify between an IT provider and a business unit?

  1. Measurable RTO, RPO, and reporting commitments for protected services Correct answer.
  2. The specific disk models installed in the backup appliance
  3. The programming language used by the backup software
  4. The names of administrators who will run restore jobs

Explanation

A service level agreement formalizes measurable commitments such as recovery targets, coverage, and reporting so expectations are explicit and auditable. Hardware models, staff names, and software internals are operational details that do not belong in the agreement. The agreement focuses on outcomes the business can rely on.

Question 25Data Protection Architecture and Terminology

In Dell backup architectures, which component is responsible for coordinating backup jobs, tracking clients, and maintaining the catalog of completed backups?

  1. The storage node
  2. The media verification daemon
  3. The client agent
  4. The backup server (master server) Correct answer.

Explanation

The backup server is the control point of a Dell backup environment: it schedules jobs, dispatches work to clients and storage nodes, and records metadata about every protected copy in its catalog. Storage nodes only hold data, client agents only run local capture, and verification processes check media rather than orchestrate jobs.

Question 26Data Protection Architecture and Terminology

What is the primary role of a catalog in a Dell data protection product?

  1. To encrypt data at rest on tape media
  2. To store metadata that lets the product locate and restore backed-up items Correct answer.
  3. To compress backup streams before they reach storage
  4. To replicate backups to a secondary site

Explanation

The catalog is the searchable metadata repository describing what was backed up, when, from which client, and where the copies reside, which is what enables fast browsing and restore. Compression, encryption, and replication are separate functions performed by other components.

Question 27Data Protection Architecture and Terminology

A full backup is taken every Sunday and an incremental backup every other day. Which statement describes what the Tuesday incremental contains?

  1. All data on the client, regardless of change
  2. All data changed since the last full backup, including Monday changes
  3. Only data changed since the Monday incremental Correct answer.
  4. Only files that were deleted since Sunday

Explanation

An incremental backup captures only the blocks or files that changed since the most recent backup of any type, which in this schedule is Monday's incremental. A cumulative (differential) backup would instead capture everything since Sunday's full.

Question 28Data Protection Architecture and Terminology

In Dell terminology, what distinguishes a snapshot from a traditional backup copy?

  1. A snapshot always writes a full independent copy to tape, while a backup stays on disk
  2. A snapshot is a point-in-time image typically retained briefly for fast recovery, while a backup is a copy kept for longer-term retention Correct answer.
  3. A snapshot requires an application outage, while a backup never does
  4. A snapshot is only usable for archiving, while a backup is only usable for disaster recovery

Explanation

Snapshots capture a point-in-time state, usually via copy-on-write or redirect-on-write mechanisms on the source array, and are intended for short retention and rapid rollback. Backups create independent copies with longer retention and are the basis for recovery from media or site loss.

Question 29Data Protection Architecture and Terminology

Which recovery objective defines the maximum acceptable amount of data loss measured in time?

  1. Retention period
  2. Recovery point objective (RPO) Correct answer.
  3. Service level tier
  4. Recovery time objective (RTO)

Explanation

RPO expresses how much data, measured as elapsed time, an organization can afford to lose, which drives backup frequency. RTO instead describes how quickly service must be restored after an outage.

Question 30Data Protection Architecture and Terminology

A Dell backup design places a storage node on a separate network segment from the backup server. What is the main architectural reason for this placement?

  1. To isolate high-volume data traffic from control traffic and production networks Correct answer.
  2. To allow the storage node to schedule its own backup jobs
  3. To convert the storage node into a client
  4. To eliminate the need for a catalog

Explanation

Separating data movement from control traffic keeps large backup streams off production and management networks, improving performance and reducing contention. The server still schedules jobs, the catalog remains required, and a storage node does not become a client through network placement.

Question 31Data Protection Architecture and Terminology

What does the term 'client' mean in a Dell data protection deployment?

  1. The console used by administrators
  2. The disk library that receives backup streams
  3. The host whose data is protected by an installed agent or integration Correct answer.
  4. The remote site used for disaster recovery

Explanation

A client is the protected machine or application whose data the backup product captures, usually through an installed agent or application integration. Disk libraries, consoles, and remote sites are separate roles in the architecture.

Question 32Data Protection Architecture and Terminology

Which statement best describes the function of change block tracking in Dell backup products?

  1. It records which blocks changed since a reference point so later backups read less data Correct answer.
  2. It replicates changed blocks to a secondary array
  3. It deduplicates blocks across clients
  4. It encrypts changed blocks before transmission

Explanation

Change block tracking maintains a record of modified blocks so incremental backups can read only those regions instead of scanning the whole volume, reducing backup windows. Encryption, deduplication, and replication are distinct features that may act on the same data but are not what tracking itself does.

Question 33Data Protection Architecture and Terminology

In a Dell deduplication architecture, what is a 'hash collision'?

  1. A backup job failing to find its storage node
  2. A client reporting an outdated catalog entry
  3. Two different data blocks producing the same fingerprint value Correct answer.
  4. A snapshot expiring before its retention period

Explanation

Deduplication identifies duplicate blocks by computing a fingerprint, usually a hash, for each block; a collision occurs when two distinct blocks yield the same fingerprint. Products mitigate this by comparing block content or using sufficiently strong hashes.

Question 34Data Protection Architecture and Terminology

Which Dell data protection concept refers to a copy of backup data kept at a second location so that operations can resume if the primary site is lost?

  1. Staging area
  2. Retention lock
  3. Scratch pool
  4. Disaster recovery copy Correct answer.

Explanation

A disaster recovery copy is an additional protected copy maintained at a secondary location so that recovery is possible after loss of the primary site. Retention lock, staging, and scratch pools serve other purposes such as immutability, ingest buffering, and temporary storage.

Question 35Data Protection Architecture and Terminology

An administrator wants backup data to be unalterable for a fixed period to satisfy a compliance requirement. Which capability addresses this?

  1. Load balancing across storage nodes
  2. Retention lock or immutability policy Correct answer.
  3. Snapshot scheduling
  4. Client-side compression

Explanation

Retention lock, sometimes called immutability, prevents deletion or modification of protected copies until a defined expiry, supporting compliance and ransomware resilience. Compression, load balancing, and snapshot scheduling affect efficiency or recovery points but do not make data unalterable.

Question 36Data Protection Architecture and Terminology

What is the difference between replication and backup in Dell data protection terminology?

  1. Replication always uses tape, while backup always uses disk
  2. Replication stores only metadata, while backup stores only data
  3. Replication creates an ongoing synchronized or near-synchronized copy, while backup creates a recoverable point-in-time copy with retention Correct answer.
  4. Replication removes the need for retention policies, while backup requires them

Explanation

Replication maintains a second copy that tracks changes continuously or at short intervals and is typically used for availability or disaster recovery. Backup produces discrete point-in-time recovery copies governed by retention, so the two solve different problems and are often combined.

Question 37Data Protection Architecture and Terminology

Which component in a Dell backup environment actually writes backup data to the target media?

  1. The catalog
  2. The storage node Correct answer.
  3. The administrative console
  4. The scheduler

Explanation

The storage node receives data from clients and writes it to the configured target, such as disk storage or tape. The catalog indexes results, the console provides management, and the scheduler triggers jobs but does not perform the write.

Question 38Data Protection Architecture and Terminology

A backup policy specifies a synthetic full. What does this mean in Dell terminology?

  1. A backup that is written only to tape
  2. A full backup taken directly from the client every night
  3. A backup that excludes all changed blocks
  4. A full backup assembled from previous incremental backups plus changed data without re-reading the whole client Correct answer.

Explanation

A synthetic full is constructed on the backup server or storage node by combining the last full with subsequent incrementals, producing a new full image without another full read from the client. This saves production and network load compared with a traditional full.

Question 39Data Protection Architecture and Terminology

What does 'granular recovery' mean in the context of Dell data protection?

  1. Recovering only the backup server configuration
  2. Restoring an individual item such as a mailbox, file, or object from a larger backup image Correct answer.
  3. Restoring data at a reduced compression ratio
  4. Restoring an entire data center after a site failure

Explanation

Granular recovery lets administrators extract a single item, such as a mailbox, document, or object, from a broader backup without restoring the whole volume or application. Full-site recovery and server configuration restore are different scopes of recovery.

Question 40Data Protection Architecture and Terminology

Which statement accurately describes the relationship between a backup server and a storage node in a scale-out Dell architecture?

  1. Both perform identical functions, so either can be removed without impact
  2. The backup server stores data, while storage nodes schedule jobs
  3. The storage node manages policy and catalog, while backup servers add capacity
  4. The backup server manages policy and catalog, while storage nodes can be added to scale capacity and throughput Correct answer.

Explanation

In scale-out designs the backup server remains the control plane for policy, scheduling, and catalog, while additional storage nodes expand the data plane for capacity and throughput. This separation allows growth without replacing the control components.

Question 41Data Protection Architecture and Terminology

What is the purpose of a staging area in a Dell backup data flow?

  1. To store only catalog metadata
  2. To permanently archive data for legal hold
  3. To temporarily hold incoming backup data before it is written to its final target Correct answer.
  4. To host the administrative console

Explanation

A staging area buffers data during ingest so that clients can finish quickly while the system completes processing and writes to the final target. It is temporary by design and is not a permanent archive, catalog store, or console host.

Question 42Data Protection Architecture and Terminology

Which pair correctly matches a Dell data protection term with its meaning?

  1. Media pool: a set of storage targets that share retention and usage rules Correct answer.
  2. Media pool: a list of protected clients
  3. Storage node: the administrative console
  4. Catalog: a set of tape drives

Explanation

A media pool groups storage targets, such as tapes or disk volumes, so that common retention and reuse rules can be applied to them. Clients, drives, and consoles are distinct objects in the architecture.

Question 43Data Protection Architecture and Terminology

An administrator needs to recover a single file from a backup taken six months ago, but the current catalog shows only the last 30 days. What is the most likely architectural explanation?

  1. The snapshot schedule was disabled
  2. The client agent stopped tracking file changes
  3. The storage node lost its network connection
  4. The catalog was pruned to a shorter retention window than the backup data itself Correct answer.

Explanation

Catalog entries are often retained for a shorter period than the backup images they describe, so older copies may still exist on media while no longer being indexed for browsing. Recovering such data typically requires importing or rescanning the media to rebuild catalog entries.

Question 44Data Protection Architecture and Terminology

What does an air-gapped copy provide in a Dell data protection strategy?

  1. A copy that replaces the need for a catalog
  2. A copy isolated from the production network so that attacks or errors cannot reach it Correct answer.
  3. A copy compressed more heavily than normal backups
  4. A copy stored only in the backup server's memory

Explanation

An air-gapped copy is physically or logically isolated from the production environment, so malware, compromised credentials, or operator error on the primary network cannot alter it. This isolation supports ransomware resilience and is distinct from compression or catalog design.

Question 45Backup and Recovery Fundamentals

In backup terminology, what does the recovery point objective (RPO) of a protected workload define?

  1. The percentage of backup jobs that must complete successfully
  2. The number of backup copies that must be retained offsite
  3. The maximum acceptable amount of data loss measured in time Correct answer.
  4. The maximum tolerable time to restore service after an outage

Explanation

The RPO describes how much data the business can afford to lose, expressed as a time window, and it drives backup frequency. It is distinct from the recovery time objective, which addresses how long recovery may take. A shorter RPO generally requires more frequent protection.

Question 46Backup and Recovery Fundamentals

A workload has an RPO of 15 minutes. Which backup schedule design satisfies that objective?

  1. Monthly full backups with quarterly offsite copies
  2. Incremental backups every 15 minutes or more frequently Correct answer.
  3. Weekly synthetic fulls with daily archive logs
  4. Full backups every night at 02:00

Explanation

If the RPO is 15 minutes, protection must run at least every 15 minutes so that no more than 15 minutes of changes can be lost. Nightly, weekly, or monthly schedules all leave longer unprotected windows. Frequency, not backup type alone, is what satisfies the objective.

Question 47Backup and Recovery Fundamentals

Which statement correctly distinguishes a full backup from an incremental backup?

  1. A full backup is always encrypted, while an incremental is always stored in clear text
  2. A full backup captures all selected data, while an incremental captures only data changed since the last backup of any type Correct answer.
  3. A full backup captures only blocks changed since the last full, while an incremental captures everything
  4. A full backup always requires a tape library, while an incremental can only write to disk

Explanation

A full backup copies the entire selected data set, providing a self-contained recovery point. An incremental copies only what changed since the previous backup, which makes it smaller and faster but dependent on a restore chain. The other statements confuse incremental behavior or introduce unrelated storage claims.

Question 48Backup and Recovery Fundamentals

After a disk failure, an administrator must restore a workload that uses weekly fulls plus daily incrementals. What is required to reach the most recent recovery point?

  1. Any single incremental backup chosen from the retention window
  2. Only the most recent incremental backup
  3. The oldest full backup in the retention window alone
  4. The most recent full backup plus each subsequent incremental in sequence Correct answer.

Explanation

An incremental restore chain requires the base full and every incremental taken after it, applied in order, to reconstruct the latest state. Restoring an incremental alone yields an incomplete image. This chain dependency is the main trade-off of incremental protection.

Question 49Backup and Recovery Fundamentals

What defines a differential backup?

  1. It captures all data changed since the last backup of any kind
  2. It captures a random sample of blocks for integrity testing
  3. It captures only the file system metadata and permissions
  4. It captures all data changed since the last full backup Correct answer.

Explanation

A differential backup accumulates every change made since the last full backup, so each successive differential grows larger. Restoring requires only the last full plus the latest differential, which simplifies recovery compared with incrementals. The other options describe incremental behavior or unrelated functions.

Question 50Backup and Recovery Fundamentals

Which practice best supports the 3-2-1 rule for backup copies?

  1. Retain three generations of full backups on a single tape
  2. Maintain three copies of data on two different media types, with one copy stored offsite Correct answer.
  3. Store three encrypted copies in one cloud region for simplicity
  4. Keep three copies on the same array, with two snapshots and one replica

Explanation

The 3-2-1 rule calls for at least three copies of data, on two distinct media or platforms, with one copy held offsite or offline. This reduces the chance that a single failure, site event, or ransomware incident destroys every copy. The other options collapse copies onto one location or medium.