Free HPE2-B01 sample questions

Correct answer: Maintaining one copy of the data offline, air-gapped, or on immutable storage.

While the traditional 3-2-1 rule dictates 3 copies of data, across 2 different media types, with 1 copy offsite, modern ransomware threats require additional safeguards. The 3-2-1-1-0 rule adds a requirement for 1 copy to be offline, air-gapped, or immutable (meaning it cannot be altered or deleted, even by an administrator, for a set period). The '0' represents zero errors during backup recovery verification.

Correct answer: Application-consistent backups utilize Volume Shadow Copy Service (VSS) or similar APIs to ensure all pending transactions are written to disk before the snapshot is taken, preventing database corruption upon restore.

Application-consistent backups interact directly with the application (often via Microsoft VSS) to quiesce the database, flush pending I/O operations from memory to disk, and ensure the database is in a consistent state before the snapshot. Crash-consistent backups simply take a storage-level snapshot without notifying the application, meaning data in memory is lost, simulating a sudden power loss. For transactional databases like SQL Server, application consistency is critical to avoid database corruption and guarantee rapid recovery.

Correct answer: True

True. Double extortion is a ransomware tactic where cybercriminals not only encrypt the victim's data to disrupt operations (demanding a ransom for the decryption key) but also steal (exfiltrate) sensitive data. They then threaten to publish or sell this data on the dark web if an additional ransom is not paid, bypassing the protection offered by traditional backups.

Correct answers: It involves moving inactive data off primary storage to long-term, lower-cost storage media.; It is implemented to ensure compliance with legal and regulatory data retention requirements.

Archiving is the process of moving data that is no longer actively used from primary storage to secondary, lower-cost storage for long-term retention. This frees up expensive primary storage. Backup, conversely, involves creating a copy of active data to recover from operational failures or corruption.

A primary driver for data archiving is adhering to legal, regulatory, or business compliance requirements that mandate data be kept immutable and accessible for extended periods (e.g., 7 years for financial records). Backups are typically kept for shorter durations (e.g., 30-90 days) for disaster recovery purposes.

Correct answer: Roles, responsibilities, and communication matrix

A critical component of any formal data recovery plan is the communication matrix and the definition of roles and responsibilities. This ensures that if key personnel are unavailable during a disaster, secondary and tertiary contacts are identified, and everyone knows exactly who has the authority to declare a disaster and execute the recovery procedures.

Correct answer: The backup appliance will reach capacity prematurely, forcing a reduction in the 30-day retention period to accommodate new backups.

Unchecked data growth directly impacts backup storage capacity. As the primary data footprint expands, the size of full and incremental backups increases. If the backup appliance (100TB) fills up, the organization will be forced to either purchase more storage or prematurely age out (delete) older backups, thereby violating their 30-day retention policy and increasing compliance risk.