Backup and Disaster Recovery Strategies CSE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Why is it important to encrypt backups stored in the cloud?

   • ATo make backups compatible with all cloud providers.
   • BTo reduce storage costs.
   • CTo protect sensitive data from unauthorized access if the backup storage is compromised.
   • DTo speed up the backup process.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A healthcare organization runs a critical database that must be backed up every 4 hours to meet a 4-hour RPO. The backup team manually initiates backups, but recent audits show occasional missed backups due to human error. The organization also requires that backups be encrypted and access-controlled. Which approach best addresses the reliability and security requirements?

   • ACreate a scheduled backup job that runs every 4 hours and store backups in an encrypted storage bucket with restricted IAM policies
   • BStore backups in a public bucket to simplify access for recovery teams
   • CUse a daily automated backup and rely on the database's built-in replication for recovery
   • DContinue manual backups but add a second operator to double-check each backup
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company wants to automate the backup of its cloud databases. The backups must be encrypted and retained for 90 days. Which approach should the administrator take?

   • AConfigure automated backups with a retention period of 90 days and enable encryption on the backup storage
   • BUse a third-party backup tool that does not support encryption
   • CTake manual snapshots daily and delete them after 90 days
   • DEnable point-in-time recovery and set the retention to 90 days, but do not encrypt the backups
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company stores backups in an object storage bucket. The security team requires that backups be protected from unauthorized access and that the backup data be encrypted. Which combination of measures should be implemented?

   • AMake the bucket public and rely on the backup files being encrypted
   • BUse server-side encryption with a customer-managed key and configure a bucket policy that restricts access to specific IAM roles
   • CEnable bucket versioning and set a lifecycle policy to delete old versions
   • DUse pre-signed URLs for all access and disable encryption to simplify management
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company's DR plan uses a pilot light approach, where a small core set of services runs in the secondary region and the full application is scaled up during failover. The RTO is 2 hours. During a failover test, scaling up the application takes 3 hours because the scaling process is manual. Which improvement would most effectively reduce the failover time to meet the RTO?

   • APerform more frequent failover tests without changing the process
   • BIncrease the size of the pilot light to run the full application
   • CAutomate the scaling process using infrastructure-as-code scripts
   • DReduce the RTO to 3 hours
   Reveal Solution Discussion Select an answer first