I85PREP
⌘ K
Dell Data Protection Foundations study materials
Dell Data Protection Foundations study resources

Dell Data Protection Foundations: Data Protection for Virtual and Cloud Environments

Dell Data Protection Foundations · Work through your exam, one topic at a time.

All guide sections

Data Protection for Virtual and Cloud Environments

Domain 6 tests protection in virtual and cloud environments: agentless backups, changed block tracking, snapshots, Kubernetes, and shared responsibility. Expect questions on what is protected, what is not, and where the copy lives.

Core rules

  • Agentless VM backup uses hypervisor APIs. VMware vSphere APIs for Data Protection (VADP) integrate with vStorage APIs; changed block tracking (CBT) identifies changed blocks for incremental backups. Hyper-V uses resilient change tracking (RCT).
  • A snapshot provides a point-in-time view for backup consistency, but it is not a backup. Snapshots consume production storage and can be lost with the source.
  • Quiescing flushes application writes before a snapshot. Without it, backups may be crash-consistent rather than application-consistent.
  • Kubernetes protection must capture namespace, persistent volume, and application metadata. CSI snapshots alone may not be enough for application-consistent recovery.
  • In cloud, the shared responsibility model means the provider secures the infrastructure, while the customer protects data, identities, and configurations. Native cloud snapshots are not a complete cross-account or cross-region strategy.
  • Cloud Tier moves older backups to object storage. Cloud DR orchestrates recovery in AWS or Azure. SaaS backup protects Microsoft 365, Salesforce, and Google Workspace data that the provider does not back up for customer retention.

Worked example

A VMware estate of 400 VMs needs daily backups with a two-hour RTO for tier-1 VMs. PowerProtect Data Manager uses VADP and CBT for agentless incremental backups. A pre-backup snapshot quiesces the guest; the backup reads changed blocks and writes to DD. Tier-1 VMs are replicated to a second DD and have an instant-recovery option. A weekly restore test boots three VMs in an isolated network. If CBT is reset or the VM is moved, the next backup may be a full, so capacity and window planning must allow for that.

Traps that cost marks

  • Treating a VMware snapshot as a backup.
  • Assuming CBT always works after storage vMotion.
  • Ignoring application consistency for databases.
  • Believing cloud providers back up SaaS data for retention.
  • Forgetting egress and cross-region costs.
  • Protecting Kubernetes pods but not persistent volumes.