A legal firm must retain case files for 10 years. They currently keep daily full backups for 2 years and monthly full backups for 10 years. The storage cost is increasing, and they are considering moving older backups to a lower-cost storage tier. However, they must ensure that the backups remain immutable and can be restored quickly if needed. Which approach best balances cost and compliance?

Delete backups older than 2 years to reduce storage cost.

Move backups to tape and store them offsite without testing restores.

Keep all backups on the same high-cost storage tier for the full 10 years.

Move backups older than 2 years to a lower-cost storage tier with immutability enabled and test restore from that tier.

Which practice helps protect backup data from unauthorized access and tampering?

Scheduling backups during off-peak hours

Storing backups only on-premises

Using the fastest available backup media

Implementing strict access controls on backup storage

A multinational company has branch offices in three countries. Each office runs its own backup server and stores backups locally. The central IT team wants to ensure that a regional disaster does not result in total data loss. The company also has data residency requirements that prohibit storing certain data outside its country of origin. Which backup topology best meets these requirements?

Decentralized backup topology with each office keeping backups only locally

Centralized backup topology with all backups replicated to the headquarters data center

Hybrid topology with local backups and cross-region replication within each country

Cloud-only backup topology with a single global cloud provider

A company backs up sensitive customer data to a cloud storage service. They are concerned about unauthorized access if the cloud account is compromised. They also need to ensure that backups cannot be altered by an attacker. Which combination of measures should they implement?

Use client-side encryption with customer-managed keys and enable immutability or WORM storage on the backup bucket.

Use a backup software that compresses data before upload.

Store backups in a different region and use multi-factor authentication.

Enable server-side encryption and rely on the cloud provider's access controls.

In the context of disaster recovery, what is the primary purpose of a data backup?

To create a copy of data that can be used to restore operations after data loss or corruption

To archive data for long-term compliance without the ability to restore it quickly

To provide real-time replication of data to a secondary site for continuous availability

To replace the need for a disaster recovery plan by storing data in multiple locations

EC-CouncilDisaster Recovery Professional

Domain 4Objective 1

Data Backup Strategies EDRP Practice Questions (Page 3)

Part of the Data Backup and Recovery Strategies domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 8–14 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

9concepts

Questions 11–15

11expert · hard
A legal firm must retain case files for 10 years. They currently keep daily full backups for 2 years and monthly full backups for 10 years. The storage cost is increasing, and they are considering moving older backups to a lower-cost storage tier. However, they must ensure that the backups remain immutable and can be restored quickly if needed. Which approach best balances cost and compliance?
Select an answer first
12foundation · easy
Which practice helps protect backup data from unauthorized access and tampering?
Select an answer first
13expert · hard
A multinational company has branch offices in three countries. Each office runs its own backup server and stores backups locally. The central IT team wants to ensure that a regional disaster does not result in total data loss. The company also has data residency requirements that prohibit storing certain data outside its country of origin. Which backup topology best meets these requirements?
Select an answer first
14application · medium
A company backs up sensitive customer data to a cloud storage service. They are concerned about unauthorized access if the cloud account is compromised. They also need to ensure that backups cannot be altered by an attacker. Which combination of measures should they implement?
Select an answer first
15foundation · easy
In the context of disaster recovery, what is the primary purpose of a data backup?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EDRP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EDRP” is a trademark of its owner, used for identification only.

Data Backup Strategies EDRP Practice Questions (Page 3)

Questions 11–15

Which practice helps protect backup data from unauthorized access and tampering?

A company backs up sensitive customer data to a cloud storage service. They are concerned about unauthorized access if the cloud account is compromised. They also need to ensure that backups cannot be altered by an attacker. Which combination of measures should they implement?

In the context of disaster recovery, what is the primary purpose of a data backup?

Keep studying — Data Backup and Recovery Strategies