Download 1V0 91 22 VMware Security Technical Associate Practice Exam and more Exams Technology in PDF only on Docsity!
Exam
Question 1. Which Veeam component is responsible for processing VM data streams before they are written to a repository? A) Backup Server B) Backup Proxy C) Guest Interaction Proxy D) WAN Accelerator Answer: B Explanation: The Backup Proxy receives VM data from the source host, processes it (compression, deduplication, encryption), and forwards it to the repository. Question 2. In the 3‑ 2 ‑1 backup rule, the “ 2 ” refers to: A) Two backup copies stored on the same media type B) Two copies of data on at least two different media types C) Two off‑site locations D) Two backup jobs running simultaneously Answer: B Explanation: The rule mandates at least two copies of data on different media (e.g., disk and tape) to protect against media‑specific failures. Question 3. What is the primary purpose of the Veeam Guest Interaction Proxy (GIP)? A) To accelerate WAN traffic B) To provide authentication for application‑aware processing on Windows guests C) To host the Veeam Backup console D) To store immutable backups Answer: B
Exam
Explanation: GIP runs inside the guest OS and supplies credentials for Veeam to interact with applications (e.g., Exchange, SQL) during backup. Question 4. Which of the following is a valid use case for a Veeam replica versus a backup? A) Long‑term archival B) Immediate failover with zero RPO C) Point‑in‑time recovery of individual files D) Compliance reporting Answer: B Explanation: Replicas are synchronized copies of VMs that can be powered on instantly, providing near‑zero RPO for disaster recovery. Question 5. What does the “Scale‑Out Backup Repository” (SOBR) allow you to do? A) Automatically encrypt all backup data B) Aggregate multiple repositories into a single logical pool C) Create immutable backups on tape D) Replace the need for a backup proxy Answer: B Explanation: SOBR pools together several backup repositories, presenting them as one logical repository with automatic load‑balancing and tiering. Question 6. Which Veeam feature enables you to verify the recoverability of a backup without affecting the production environment? A) SureBackup B) Instant VM Recovery C) Backup Copy Job
Exam
B) WAN Accelerator C) Guest Interaction Proxy D) Scale‑Out Backup Repository Answer: B Explanation: The WAN Accelerator compresses and optimizes data transferred between sites, reducing bandwidth consumption for backup and replication traffic. Question 10. In Veeam Backup & Replication, a “Backup Copy Job” differs from a regular backup job because it: A) Runs only on physical servers B) Copies existing backup files to another repository, optionally applying GFS retention C) Creates replicas instead of backup files D) Performs instant recovery only Answer: B Explanation: Backup Copy Jobs duplicate backup files to a secondary repository and can enforce Grandfather‑Father‑Son (GFS) retention policies. Question 11. Which of the following storage types cannot be used directly as a Veeam backup repository? A) Direct‑Attached Storage (DAS) B) Network File System (NFS) share C) Amazon S3 object storage without a Hardened Repository wrapper D) Windows Server with ReFS volume Answer: C Explanation: Native S3 cannot be used directly; it must be accessed via a Linux Hardened Repository or a Veeam Cloud Tier integration.
Exam
Question 12. What is the default RPO goal for Veeam’s Continuous Data Protection (CDP) when configured? A) 15 minutes B) 5 minutes C) Near‑real‑time (seconds) D) 1 hour Answer: C Explanation: CDP captures changes continuously, providing near‑real‑time RPO, often measured in seconds. Question 13. Which Veeam component stores the configuration database for the backup infrastructure? A) Backup Proxy B) Backup Server C) Repository Server D) Guest Interaction Proxy Answer: B Explanation: The Backup Server hosts the Veeam Backup Service and maintains the configuration database (VB365). Question 14. In Veeam Backup Enterprise Manager, what is the purpose of a “Delegated User” role? A) To grant full admin rights across all backup servers B) To restrict a user to view‑only access for reports C) To allow a user to manage a specific backup server while being limited on others
Exam
A) Performance tier B) Archive tier C) Cloud tier D) Cold tier Answer: D Explanation: SOBR defines Performance, Archive, and optionally Cloud tiers; “Cold tier” is not a recognized tier name. Question 18. In Veeam ONE, the “Capacity Planning” wizard helps administrators to: A) Forecast storage consumption based on historical backup growth trends B) Perform instant VM recovery tests C) Configure firewall rules for backup traffic D) Generate licensing reports only Answer: A Explanation: Capacity Planning analyzes past backup data to predict future storage needs, assisting in proactive planning. Question 19. What does the “Secure Restore” option do during a restore operation? A) Encrypts the restored VM automatically B) Scans the backup files for malware before restoring C) Restores the VM to a read‑only datastore D) Uses a VPN tunnel for data transfer Answer: B Explanation: Secure Restore integrates with anti‑malware engines to scan backup data for threats before the data is written to the target.
Exam
Question 20. Which Veeam feature is specifically designed for service providers to deliver backup services to multiple customers? A) Veeam Cloud Connect B) Veeam Backup Enterprise Manager C) Veeam ONE D) Veeam Agent for Linux Answer: A Explanation: Veeam Cloud Connect enables service providers to host backup repositories for many tenants in a multi‑tenant, secure fashion. Question 21. When using Veeam Backup & Replication to protect a VMware vSphere environment, which of the following is required on the ESXi hosts? A) Veeam Backup Proxy installed on each host B) Veeam Agent for VMware installed on each VM C) Veeam Backup Service installed on a Windows machine that can communicate with the hosts D) Veeam Guest Interaction Proxy installed on each host Answer: C Explanation: The backup server must be able to communicate with the vCenter/ESXi hosts; no agents are needed on the hosts themselves. Question 22. Which retention policy combines daily, weekly, monthly, and yearly backup copies? A) GFS (Grandfather‑Father‑Son) B) Reverse Incremental C) Synthetic Full D) Instant Recovery
Exam
A) One copy on the performance tier and one on the archive tier B) Two copies on the performance tier only C) Three copies on the performance tier D) One copy on the performance tier, one on the archive tier, and one off‑site replica Answer: D Explanation: The rule requires three copies, stored on at least two media types, with one copy off‑site. The performance tier, archive tier (different media), and an off‑site replica satisfy the rule. Question 26. Which of the following statements about Veeam’s “Instant File-Level Recovery” is true? A) It restores files directly to the production VM without mounting a backup B) It requires a full VM restore before files can be accessed C) It only works for Linux VMs D) It uses the Veeam Agent for Windows to recover files Answer: A Explanation: Instant File-Level Recovery mounts the backup as a virtual disk, allowing individual files to be restored directly to the running VM. Question 27. In Veeam Backup & Replication, what does the “Job Failure Notification” setting control? A) Whether the backup job runs in parallel B. The type of compression used C) Email or SNMP alerts sent when a job fails D) The location of the backup repository Answer: C
Exam
Explanation: Job Failure Notification configures alerting mechanisms (email, SNMP) to inform administrators of job failures. Question 28. Which backup mode provides the smallest storage footprint for a backup repository that stores many VM backups over time? A) Forward Incremental B) Reverse Incremental C) Synthetic Full only D) Full backup only Answer: B Explanation: Reverse Incremental maintains a single full backup that is constantly updated, keeping only one synthetic full and multiple incremental deltas, minimizing storage use. Question 29. When configuring a Veeam backup proxy in a virtual environment, which transport mode offers the highest performance for large VM backups? A) Direct SAN B) Virtual Appliance (Hot‑Add) C) Network (NBD) D) Backup Proxy over VPN Answer: A Explanation: Direct SAN reads data directly from the storage array over the SAN fabric, bypassing the host network and delivering the best throughput. Question 30. What is the primary function of the “Veeam Backup Service” running on the backup server? A) To store backup files on disk
Exam
Question 33. Which of the following scenarios would most likely require the use of “Guest Interaction Proxy” on a Linux guest? A) Backing up a Windows Server with VSS B) Performing application‑aware processing for a Linux‑based MySQL database C) Replicating a VMware VM to a remote site D) Using Instant VM Recovery for a Linux VM Answer: B Explanation: GIP on Linux provides credentials for Veeam to interact with Linux applications (e.g., MySQL) to ensure transaction‑consistent backups. Question 34. What is the purpose of the “Veeam Backup & Replication Console”? A) To host the backup repository B) To provide a graphical interface for configuring, monitoring, and managing backup infrastructure C) To act as a proxy for WAN acceleration D) To store immutable backups in the cloud Answer: B Explanation: The console is the primary GUI used by administrators to manage all Veeam components and jobs. Question 35. Which Veeam feature allows you to automatically prune old backup files based on a defined retention policy? A) GFS (Grandfather‑Father‑Son) B) Synthetic Full C) Backup Copy Job with GFS D) Instant Recovery Answer: C
Exam
Explanation: Backup Copy Jobs can be configured with GFS retention, automatically deleting old backup files according to the policy. Question 36. When using Veeam Cloud Connect, what is the term for the storage offered by the service provider to the tenant? A) Backup Repository B) Cloud Repository C) Service Provider Repository (SPR) D) Managed Repository Answer: B Explanation: In Cloud Connect terminology, the provider’s storage is called a Cloud Repository, which tenants connect to for backup and replication. Question 37. Which of the following best describes the “Staged Restore” process? A) Restoring data to a temporary isolated environment for validation before moving to production B) Performing a full VM restore in multiple phases to reduce downtime C) Restoring only the metadata of a backup job D) Using a backup copy job to restore data to a secondary site Answer: A Explanation: Staged Restore places restored data in a sandbox (often a DataLab) where it can be inspected or validated before being moved to the production environment. Question 38. In Veeam Backup & Replication, what does the “Transport Mode – Hot‑Add” require on the backup proxy? A) Direct access to the SAN fabric B) Installation of a Veeam virtual appliance on the same ESXi host as the source VM
Exam
A) Secure Restore B) Immutable Backups C) Veeam Backup Integrity Check D) SureBackup Answer: C Explanation: Veeam Backup Integrity Check validates backup files by verifying checksums, helping detect corruption or ransomware alterations. Question 42. In Veeam ONE, the “Alert” “Backup job failed due to insufficient free space” is triggered by which component? A) Veeam Backup Service B) Veeam Proxy C) Veeam Repository D) Veeam Guest Interaction Proxy Answer: A Explanation: The Backup Service monitors job execution and raises alerts when conditions like insufficient storage are detected. Question 43. Which of the following is a prerequisite for using Veeam’s “Instant VM Recovery from a backup file stored on a Scale‑Out Backup Repository”? A) The SOBR must have at least one performance tier disk attached to the host B. The backup file must be a synthetic full C. The VM must be powered off on the source host D. The repository must be a Linux Hardened Repository Answer: A
Exam
Explanation: Instant VM Recovery requires that the performance tier of the SOBR be locally accessible to provide sufficient I/O performance. Question 44. What is the main advantage of configuring “Backup Proxy” in “Virtual Appliance” mode for a VDI environment? A) Reduces network traffic by using direct SAN access B) Allows the proxy to be placed on the same host as the VDI desktops for faster backup C) Enables backup of Linux guests only D) Provides built‑in encryption of backup data Answer: B Explanation: Virtual Appliance mode (Hot‑Add) lets the proxy run on the same ESXi host as the VDI desktops, minimizing data movement and improving backup speed. Question 45. Which Veeam component is responsible for managing licensing, user authentication, and role‑based access control (RBAC)? A) Veeam Backup Server B) Veeam Enterprise Manager C) Veeam Backup Proxy D) Veeam Cloud Connect Gateway Answer: B Explanation: Veeam Enterprise Manager centralizes license management, authentication, and RBAC across multiple backup servers. Question 46. When using Veeam to protect Microsoft Exchange, which of the following must be enabled for Application‑Aware Processing to work correctly? A) VSS (Volume Shadow Copy Service) on the Exchange server
Exam
Question 49. Which of the following is a requirement for Veeam’s “Immutable Backups” on a Linux Hardened Repository? A. Enabling Windows BitLocker on the repository server B. Configuring object lock with a retention period in the S3 bucket C. Using Veeam’s built‑in encryption key management D. Setting the repository to “Read‑Only” mode in the Veeam console Answer: B Explanation: Immutable backups rely on the S3 object lock feature, which enforces a retention period during which objects cannot be altered or deleted. Question 50. What does the “Failover to Replica” option do during a DR test? A) Powers on the replica VM and redirects traffic to it automatically B. Creates a new replica from the backup file C. Initiates a synthetic full backup of the primary VM D. Deletes the primary VM after failover Answer: A Explanation: “Failover to Replica” brings the replica online and can optionally reconfigure network settings, allowing immediate service continuation. Question 51. Which of the following is a valid reason to use a “NAS Backup” job instead of a VM backup? A) To protect file shares that are not part of a virtual machine B) To enable instant VM recovery C) To back up SQL databases running on a VM D) To replicate VMs to a remote site
Exam
Answer: A Explanation: NAS Backup is designed to protect file‑level data on network shares, independent of VM workloads. Question 52. In Veeam Backup & Replication, what is the effect of enabling “Backup from Storage Snapshots” on a proxy? A) The proxy reads data directly from the storage array’s snapshot, reducing load on the production host B. The proxy creates a new snapshot before each backup job C. The proxy encrypts data before sending it to the repository D. The proxy only backs up changed blocks after the snapshot is taken Answer: A Explanation: This mode allows the proxy to read data from a storage‑level snapshot, minimizing impact on the source VM. Question 53. Which of the following Veeam licensing models provides the ability to protect an unlimited number of VMs? A) Per‑Socket license B) Per‑Instance license C) Veeam Universal License (VUL) with capacity‑based subscription D) Veeam Backup & Replication Standard edition Answer: C Explanation: VUL allows capacity‑based licensing, enabling protection of unlimited VMs within the purchased capacity. Question 54. What is the primary purpose of the “Veeam Backup Repository” setting “Enable encryption at rest”?
