Veeam VMCE+ v13 — Course-to-Exam Study Guide

Built by mapping the three courses VMCE+ requires, VBR v13: Configure, Manage and Recover, Veeam ONE and Recovery Orchestrator, against a 236-question VMCE practice bank. Organised by what actually gets tested, not by course order.

This page decides what to study. ToastVault holds the notes for every exam topic, and every module below links straight to them. Blueprint cross-reference → · BreadLab labs → · Flashcards → · Dictionary →

How this guide was built

Every one of the 236 practice questions was tagged to the course module that teaches it, and separately to the ToastVault topic it tests. The counts below are the result. The VBR modules are the course’s published 27-topic agenda, in order. Veeam doesn’t publish module titles for the Veeam ONE and Recovery Orchestrator courses, so those are grouped by topic from learners’ write-ups of the modules.

Four structural facts about this bank:

The real exam is 100 questions in 150 minutes, scored out of 1000 with 724 to pass. The timed practice exam below uses the same length and clock.

Coverage map — course module vs. question count

ModuleCourseQsShareVerdict
B11 Backup Infrastructure OptimizationVBR v13: Configure, Manage and Recover2711%Heaviest module: which component, mode or port
B9 Backup Copy JobsVBR v13: Configure, Manage and Recover177%Copy modes, retention maths, five disputed keys
B1 Data Protection StrategiesVBR v13: Configure, Manage and Recover167%Definitions you can bank
B20 Selecting the Ideal Recovery MethodVBR v13: Configure, Manage and Recover156%Which restore fits the failure
B21 Enacting a RecoveryVBR v13: Configure, Manage and Recover156%Failover plans, five times over
B10 Immutability and Hardened RepositoriesVBR v13: Configure, Manage and Recover146%Design the immutable setup
B5 Protecting WorkloadsVBR v13: Configure, Manage and Recover146%AAP and SQL logs
B14 Scale-out Backup RepositoryVBR v13: Configure, Manage and Recover136%Copy vs move, sealed chains
B3 What is Protected?VBR v13: Configure, Manage and Recover115%Cloud Connect, asked five ways
B19 Advanced Recovery FeaturesVBR v13: Configure, Manage and Recover104%Secure, staged, instant disk
B4 Security and Protection ConsiderationsVBR v13: Configure, Manage and Recover104%Config restore modes, MFA, locations
B6 Deploying AgentsVBR v13: Configure, Manage and Recover104%Which protection group
B16 Recovery VerificationVBR v13: Configure, Manage and Recover94%Name the SureBackup part
B7 Unstructured Data BackupVBR v13: Configure, Manage and Recover83%Pieces of a file share backup
B17 Veeam Backup Enterprise ManagerVBR v13: Configure, Manage and Recover73%One capability each
B12 ReplicationVBR v13: Configure, Manage and Recover63%Seeding and CDP basics
O1 Deploying and Connecting Veeam ONEVDP: Monitor, Manage, Analyze (Veeam ONE)63%Which product answers this
O2 Monitoring, Alarms and RemediationVDP: Monitor, Manage, Analyze (Veeam ONE)63%Which view, which alarm
B8 Optimizing Your BackupsVBR v13: Configure, Manage and Recover42%The method table
B13 Long-term RetentionVBR v13: Configure, Manage and Recover21%Tape step order
B15 Move and Copy Backups with VeeaMoverVBR v13: Configure, Manage and Recover21%Move backup
B24 Enterprise PluginsVBR v13: Configure, Manage and Recover21%Plug-in basics
O3 Reports, Dashboards and Business ViewVDP: Monitor, Manage, Analyze (Veeam ONE)21%Reports and Business View
O4 Capacity Planning, Deployment Projects and v13 SecurityVDP: Monitor, Manage, Analyze (Veeam ONE)21%Capacity what-ifs
R2 Orchestration PlansVDP: Scale, Automate, Secure (Recovery Orchestrator)21%Plan types
R3 Readiness Checks, DataLabs and TestingVDP: Scale, Automate, Secure (Recovery Orchestrator)21%Readiness and DataLabs
R4 Plan Execution and ReportsVDP: Scale, Automate, Secure (Recovery Orchestrator)21%Reports
B22 Malware DetectionVBR v13: Configure, Manage and Recover10%One question
B27 Veeam CalculatorsVBR v13: Configure, Manage and Recover10%One question
B2 Analysis of Risks to DataVBR v13: Configure, Manage and Recover00%Not tested by this bank
B18 Incident Response PlanningVBR v13: Configure, Manage and Recover00%Not tested by this bank
B23 Post-Incident ProcessesVBR v13: Configure, Manage and Recover00%Not tested by this bank
B25 Monitoring, Alerting, and ReportingVBR v13: Configure, Manage and Recover00%Not tested by this bank
B26 TroubleshootingVBR v13: Configure, Manage and Recover00%Not tested by this bank
R1 Deploying Recovery OrchestratorVDP: Scale, Automate, Secure (Recovery Orchestrator)00%Not tested by this bank

B11 alone is 11% of the bank, and the top eight modules are more than half of it. Six course modules have no questions at all; they are listed under gaps.

Priority tiers

Tier 1 — must be automatic (131 questions, 56%)

B11 Backup Infrastructure Optimization, B9 Backup Copy Jobs, B1 Data Protection Strategies, B20 Selecting the Ideal Recovery Method, B21 Enacting a Recovery, B10 Immutability and Hardened Repositories, B5 Protecting Workloads, B14 Scale-out Backup Repository.

Proxies and transport modes, backup copy jobs, RPO/RTO and 3-2-1-1-0, both recovery modules, application-aware processing, hardened repositories and SOBR. This is more than half the bank. Get these to the point where you answer without thinking.

Tier 2 — solid working knowledge (83 questions, 35%)

B3 What is Protected?, B19 Advanced Recovery Features, B4 Security and Protection Considerations, B6 Deploying Agents, B16 Recovery Verification, B7 Unstructured Data Backup, B17 Veeam Backup Enterprise Manager, B12 Replication, O1 Deploying and Connecting Veeam ONE, O2 Monitoring, Alarms and Remediation.

Service providers, security settings, agents, advanced restores, SureBackup, file shares, Enterprise Manager, CDP and the Veeam ONE basics. Fewer questions per module, but each is a single fact you know or don’t.

Tier 3 — know the vocabulary (22 questions, 9%)

B8 Optimizing Your Backups, B13 Long-term Retention, B15 Move and Copy Backups with VeeaMover, B24 Enterprise Plugins, O3 Reports, Dashboards and Business View, O4 Capacity Planning, Deployment Projects and v13 Security, R2 Orchestration Plans, R3 Readiness Checks, DataLabs and Testing, R4 Plan Execution and Reports, B22 Malware Detection, B27 Veeam Calculators.

The method table, tape, VeeaMover, plug-ins, malware settings, and the rest of Veeam ONE and Recovery Orchestrator. Learn the handful of facts here, then spend the saved time on the gaps, because the real exam asks far more about Veeam ONE and VRO than this bank does.

Tier 1 deep dive

B11 — Backup Infrastructure Optimization 27 questions

Key takeaways

  1. Transport modes in automatic order: Direct storage access → Virtual appliance (HotAdd) → Network (NBD). A physical proxy can never HotAdd. Failover to network mode is on by default.
  2. Put proxies next to the data: one at each site for replication (source compresses, target unpacks), and in the remote data centre for its own VMs.
  3. Ports: 902 proxy→ESXi for NBD, 6160 Installer Service, 6162 Data Mover, 443 console→backup server in v13.
  4. Deduplicating appliances and SMB shares need a gateway server. If you don't pick one, the backup server becomes it.

Also inToastVault 1.2 1.3 1.5 2.1 2.2 2.5·Cards 1.2 1.3 2.1 2.5

The course covers: Backup server, console and web UI; backup proxies and transport modes; repositories, gateway and mount servers; WAN acceleration; installation and system requirements; the configuration database. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

The biggest module in the bank, 27 of 236 questions, and almost all of it is which component, which mode, which port. A proxy question is usually decided by one word in the stem: physical, encrypted, vSAN, FC, Hyper-V local storage.

Facts to know cold

  • Automatic mode tries Direct SAN first. A physical proxy with FC access to the VMFS LUNs uses Direct storage access; it is also the answer for the least impact on hosts. Q194Q43
  • HotAdd falls back to NBD when the proxy VM can't see the datastore, because failover to network mode is enabled by default. Q199
  • vSAN means Virtual appliance. Direct SAN and Direct NFS don't work with vSAN, and HotAdd doesn't touch the VMkernel network. Q63
  • Encrypted vSphere VMs: no Direct SAN. Use NBDSSL for an encrypted transport path. Q32
  • Direct SAN restore needs thick disks. A thin disk restore through a Direct-SAN-only proxy fails. Q103
  • Hyper-V on local storage uses the on-host proxy: the host itself does the work. Off-host needs shared storage. Q29
  • One proxy per site for replication: a stable data path, and the source proxy compresses before the WAN. The bank has both reasons keyed in twin questions. Q110Q168Q186
  • Proxy is the bottleneck? Add another proxy. Removing a proxy role leaves the server in the managed servers list. Q34Q130
  • Backup from Storage Snapshots needs the array added under Storage Infrastructure, and it shortens the VMware snapshot (and the stun on commit). Q26Q145
  • Data Domain is slow? The backup server is acting as its gateway. Assign a proper gateway server. Q112
  • WAN accelerators come in pairs, one at each end, and remove repeated data before it crosses a slow link. Q71Q207
  • Ports: 902 for NBD, 6162 for the Data Mover (6160 is the Installer Service), 443 for the v13 console. Q195Q196Q197
  • Work without RDP: install the console on your own PC. Automate with the backup server's REST API. No mouse? A silent install from the command line. Q7Q40Q157
  • Install failures: Windows 2008 R2 and SQL Server 2008 are unsupported for the backup server and its database. Q144Q187
  • Configuration database resilience: the bank keys SQL Always On plus the configuration backup tool. v13 defaults to PostgreSQL, and the v13 answer is High Availability on the Veeam Software Appliance (Premium edition). Q169Q206

Trap: “Network mode” is never wrong for connectivity, so it shows up as a distractor everywhere. The exam wants the best mode for the stem: Direct SAN for FC and least impact, HotAdd for vSAN or a VM proxy, NBDSSL for encryption.

Drill

Add one proxy VM and force each transport mode in turn on the same job, watching which mode the job log reports. Then hide a datastore from the proxy and run again. Lab 1.

Documentation

B9 — Backup Copy Jobs 17 questions

Key takeaways

  1. A backup copy job reads existing backup files, never production. That is why it is the 3-2-1 answer.
  2. Immediate copies every restore point as it lands and is the only mode that copies transaction log backups. Periodic copies the latest point once per interval.
  3. The mode is fixed when the job is created. To change it, make a new job and delete the old one.
  4. Retention math: 62 daily points cover any day in two months, 26 weekly GFS points cover any week in six months.

Also inToastVault 3.2 3.4 3.6·Cards 3.2 3.4 3.6

The course covers: Backup copy jobs: immediate (mirroring) and periodic (pruning) copy modes, retention and GFS on the copy, the backup copy window, RPO monitoring, WAN acceleration, seeding and mapping. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

17 questions, and the most argued-with module in the bank: five keys here disagree with the documentation. The same “change periodic to immediate” question appears three times with three different keys.

Facts to know cold

  • Copy mode can't be switched. The documented answer is to create a new backup copy job in the other mode and remove the old one. The bank keys a different option each time it asks. Q16Q65Q88
  • Immediate mode copies log backups. SQL logs every 30 minutes, or mixed VMware and Hyper-V sources, need immediate copy (one job per platform). Q68Q115
  • Retention arithmetic: 62 days of short-term retention plus 26 weekly GFS fulls. Immediate keeps every point; periodic keeps one per day and uses less space. Q42Q95Q126Q179
  • Backup copy window keeps copies off a busy WAN during business hours. Q87
  • RPO monitor on the copy job alerts if no new copy lands in time, such as 8 hours. Q47
  • Mapping points a copy job at an existing chain on the target, so only changes are sent. Q150
  • Source of the data: existing backup files on the source repository. A copy job across sites with WAN accelerators is the answer to the lost-diagram questions. Q212Q105Q108
  • File share backups aren't copied by a backup copy job. They get a secondary repository inside the file share job itself. The bank keys the opposite. Q28
  • Replacing a ReFS repository: the bank keys a backup copy job; Move backup keeps block-clone savings and repoints the job, which is our reading. Q69

Trap: “Copy” in a capacity tier and a backup copy job are different things. A SOBR copy policy copies to object storage inside the repository; a backup copy job is a separate job with its own retention and target.

Drill

Create one copy job in each mode against the same source job, run the source three times, and compare the points on the target. Then open the job properties and look for a mode switch. Lab 4.

Documentation

B1 — Data Protection Strategies 16 questions

Key takeaways

  1. RPO = data loss, measured backwards from the disaster. RTO = downtime, measured forwards.
  2. Pick the method from the targets: backup (hours), replication (minutes), CDP (seconds).
  3. 3-2-1-1-0: 3 copies, 2 media, 1 offsite, 1 offline or immutable, 0 errors after verification.
  4. The 0 is SureBackup. The offsite copy is a backup copy job.

Also inToastVault 1.1 1.5·Cards 1.1

The course covers: RPO and RTO, the 3-2-1-1-0 rule, matching backup, replication and CDP to business targets, building a protection strategy. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

16 questions, all definitions or arithmetic. Several are the same definition asked four ways. Free points if RPO and RTO are automatic.

Facts to know cold

  • RPO is the acceptable data loss measured in time. 15 minutes of lost transactions is an RPO. Q6Q84Q162Q163Q193
  • RTO is the longest a system can be down after a failure. Q192
  • Restore point maths: the newest point before the disaster wins. With a 4-hour RPO and a 10:00 disaster, 09:30 is the answer. Q24
  • Lowest RPO is CDP. Two apps that can't be down more than 4 hours on nightly backups get CDP or hourly replication; the bank keys both on twin questions. Q81Q74Q182Q177
  • 3-2-1: a job writing only to one place is one copy. A backup copy job to public cloud object storage adds the second, offsite, different-media copy. Q107Q116Q175
  • The 0 is automated recoverability testing: SureBackup. Q133Q198

Trap: Answer options that mention “downtime” describe RTO. If the stem asks for RPO, any option about how long you're down is the distractor.

Drill

Write the RPO and RTO of three BreadLab workloads on one line each, and the Veeam feature that meets them. No lab needed.

Documentation

B20 — Selecting the Ideal Recovery Method 15 questions

Key takeaways

  1. Quick rollback restores only changed blocks (CBT) to the original VM, for problems inside the guest: a bad patch, a user mistake.
  2. Physical machine dead, hypervisor available? Instant VM Recovery of the agent backup is the lowest RTO.
  3. Only the .vmx lost? Restore VM files. NAS dead? Instant file share recovery.
  4. Guest file restore can Copy To a UNC path, and can go through VMware Tools (VIX) when the network can't reach the VM.

Also inToastVault 4.1 4.2 4.3 4.5·Cards 4.1 4.2 4.5

The course covers: Choosing between entire VM restore, quick rollback, Instant VM Recovery, VM files restore, guest OS file restore, instant file share recovery and bare-metal restore. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

15 questions, all “which restore type”. The stem always contains the deciding fact: what broke, what still works, and how fast it must be back.

Facts to know cold

  • Quick rollback fits guest-side problems only: user error, a failed update or patch. Not storage, host or hardware faults. Q27Q80Q140Q218
  • Physical to virtual, fast: Instant VM Recovery of the agent backup to vSphere or Hyper-V, even with large volumes. Q37Q70Q111Q46Q82
  • Orphaned VMs with good disks: restore only the VM configuration files. Q94
  • NAS hardware failure: instant file share recovery publishes the share from the backup. Q36
  • Guest file restore: Copy To a UNC path; through VIX when there's no network path; helper host or temporary helper appliance for Linux. Q22Q128Q176
  • Bare-metal Linux server: boot Veeam Recovery Media and restore the whole machine. Q138

Trap: Quick rollback is offered for every whole-VM problem in the options. If the stem mentions failed hardware, a datastore or moving the VM, it can't be quick rollback.

Drill

Break a test VM three ways (delete a file, a bad registry change, remove its .vmx) and restore each with the lightest tool. Lab 6.

Documentation

B21 — Enacting a Recovery 15 questions

Key takeaways

  1. Failover plan = start order plus delays, made before the disaster. Application groups belong to SureBackup.
  2. Planned failover syncs once more, shuts the source down, then starts the replica: the answer for a known outage.
  3. Undo failover discards replica-side changes. Failback sends them back to production, then you commit.
  4. Instant Recovery runs from the backup via vPower NFS on the mount server. Finish with Migrate to production.

Also inToastVault 3.5 4.1 4.2 4.5·Cards 3.5 4.1 4.2 4.5

The course covers: Replica failover and failback, planned and permanent failover, undo, failover plans, Instant Recovery and migrating to production. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

15 questions, and five of them ask for the failover plan in different words: order, delays, groups, databases before apps.

Facts to know cold

  • Start order and delays are a failover plan, every time. Q12Q55Q101Q102Q113
  • Known outage tonight? Planned failover: final sync, source off, replica on. Q9Q118
  • After a plan runs: Undo, Start, Edit and Delete are the actions available. Q109
  • Going back: Undo throws DR changes away; Failback keeps them. Q148Q213Q52
  • Instant Recovery is temporary. The mount server publishes the backup over vPower NFS; Migrate to production makes it permanent. Q219Q100Q129Q220

Trap: “Application group” sounds right for start order, but it only orders VMs inside a SureBackup virtual lab. For real failover it is always a failover plan.

Drill

Replicate two VMs, build a failover plan with a 60-second delay, run it, undo it, run it again and fail back. Lab 8 and Lab 7.

Documentation

B10 — Immutability and Hardened Repositories 14 questions

Key takeaways

  1. A hardened repository is Linux on XFS with immutability of 7 to 9999 days. Windows ReFS, NAS shares and SMB can't be made immutable by Veeam in this bank.
  2. Single-use credentials deploy the data mover once and are never stored, so a compromised backup server can't reach the repository.
  3. Only methods that don't rewrite the full work: forward incremental with periodic synthetic fulls.
  4. GFS points stay locked for their GFS retention. Raising the period applies to active and new chains.

Also inToastVault 2.4 3.2 3.3 3.4·Cards 2.4 3.2 3.3 3.4

The course covers: Linux hardened repositories, XFS fast clone, single-use credentials, immutability periods and how they interact with retention and GFS, immutability on object storage. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

14 questions. Most are “design an immutable setup”: move the data off the NAS or ReFS server onto a hardened repository, and turn on Object Lock for the offsite copy.

Facts to know cold

  • Make it immutable: NAS or ReFS can't be. Move to a hardened repository and enable immutability on the S3 copy. Q4Q119Q136Q58
  • SOBR design: hardened repository on XFS as performance tier, immutable S3 as capacity tier, copy-and-move when the local server holds fewer days. Q86Q117Q153
  • Numbers: minimum 7 days. The active chain's lock keeps being extended; a higher value applies to active and new chains. Q200Q122
  • When can a point go? A GFS monthly with 6-month retention stays locked six months, then retention deletes it the next day. Q25
  • Storage grows on XFS? The immutability period is too long, so old chains can't be deleted. Q165Q62
  • Method and credentials: forward incremental with synthetic fulls; single-use credentials aren't stored. Q201Q202

Trap: Reverse incremental and forever forward incremental both rewrite the .vbk, so neither works on an immutable repository. They show up as distractors in every hardened-repository design question.

Drill

Build an Ubuntu hardened repository on XFS, back up to it, then try to delete a .vbk as root and read the error. Lab 2.

Documentation

B5 — Protecting Workloads 14 questions

Key takeaways

  1. Application-aware processing (VSS) makes a consistent backup and unlocks SQL transaction log backup. Without it you get crash-consistent.
  2. A once-a-day snapshot plus log backups every N minutes meets a minutes-level database RPO.
  3. Select VMs by vSphere tag and new VMs join the job on the next run.
  4. The guest interaction proxy deploys the runtime into the guest for indexing and processing.

Also inToastVault 3.6 3.7 3.10 4.4·Cards 3.6 3.7 3.10 4.4

The course covers: Backup jobs for VMware and Hyper-V, object selection by tags, guest processing, application-aware processing, SQL transaction logs, guest interaction proxies and indexing. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

14 questions. Seven of them are the same idea: SQL needs application-aware processing, and point-in-time restore needs log backups.

Facts to know cold

  • No AAP = crash-consistent. AAP is the setting that captures disks and SQL logs consistently. Q214Q50Q17
  • Point-in-time SQL needs transaction log backup in AAP, on a schedule matching the RPO (every 15 or 30 minutes). Q35Q89Q178Q221Q85
  • Native SQL tools to a Veeam repository: the Veeam Plug-in for Microsoft SQL, or AAP's VSS writer. Q152
  • Dynamic membership: vSphere tags, combined with exclusions for disks you don't want. Q39Q79Q171
  • Indexing and guest processing go through the guest interaction proxy. Q191Q14

Trap: “Enable SQL log truncation” and “back up logs” look alike. Truncation alone gives no point-in-time restore; you need log backup on an interval.

Drill

Back up a SQL VM with AAP off, then on with 15-minute log backup, and open the restore point list in Veeam Explorer for SQL each time.

Documentation

B14 — Scale-out Backup Repository 13 questions

Key takeaways

  1. Capacity tier Copy copies every new backup to object storage right away. Move relocates backups older than N days.
  2. Move only takes inactive (sealed) chains. Forever forward incremental never seals, so nothing moves.
  3. Archive tier takes GFS points from the capacity tier, or straight from an object-storage performance tier. In Azure it uses a temporary archiver appliance VM.
  4. Data locality keeps a chain on one extent; Performance splits fulls and increments.

Also inToastVault 2.3 2.4·Cards 2.3 2.4

The course covers: Scale-out Backup Repositories: performance, capacity and archive tiers, copy and move policies, placement policies, object storage, the archiver appliance. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

13 questions, mostly design: which tier, which policy, which mode, to get a second copy offsite or free up local space.

Facts to know cold

  • Second copy, other media, offsite, no extra job: capacity tier with Copy. Q15
  • Free local space after N days: capacity tier with Move, retention long enough, weekly fulls to seal chains. Q120Q57Q127
  • Nothing ever moves: the chain is forever forward incremental, so it never becomes inactive. Q203
  • Cheapest tier: archive tier. Azure needs the archiver appliance, running in Azure; an S3 performance tier can archive directly. Q154Q131Q5
  • Full Windows FC repository: make it the performance tier of a SOBR and add immutable S3 as the capacity tier. Q93Q142
  • Placement: data locality keeps fulls and increments together. Q204
  • Copy plus move together: copy every point to S3 and move after 14 days; the bank and our reading disagree on which box that is. Q184Q1

Trap: “Archive tier” is offered whenever a question says “long-term”. Archive only takes GFS points, so it doesn't free local disk of short-term restore points.

Drill

Run MinIO with Object Lock on breadweb, add it as a capacity tier, and watch a sealed chain move. Lab 5.

Documentation

Tier 2 deep dive

B3 — What is Protected? 11 questions

Key takeaways

  1. Agents exist for Windows, Linux, Mac and Solaris. Not FreeBSD, AS/400, HP-UX or iOS.
  2. AWS, Azure and Google VMs are protected agentlessly by Veeam Backup for each cloud, using snapshots.
  3. Cloud Connect sends backups and replicas to a provider over one TLS port, no VPN. That is BaaS and DRaaS.
  4. VSPC deploys and manages Veeam Agents and Backup & Replication at client sites.

Also inToastVault 1.3 2.1 2.2 2.3 2.4 2.5 3.7 3.9·Cards 1.3 2.1 2.3 2.4 2.5 3.7 3.9

The course covers: A tour of the Veeam Data Platform: what can be protected (virtual, physical, cloud, file and object), the service-provider stack (Cloud Connect, VSPC) and partners. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

11 questions. Five are Cloud Connect asked different ways; the rest are “which platforms are supported”.

Facts to know cold

  • No VPN to a provider: Veeam Cloud Connect, for backup and for replication. Q132Q135Q141Q161
  • VCSP services: Backup as a Service, DR as a Service, and dedicated compute and storage for replicas. Q75Q190
  • VSPC deploys Veeam Backup & Replication and Veeam Agents to managed clients. Q13Q92
  • Agents and platforms: Windows and Linux agents; Solaris image-level; AWS and Azure agentless. Q3Q45Q91

Trap: VirtualBox and iOS appear as distractors in “which platforms” questions. They are not Veeam workloads.

Drill

Skim the platform support list in the v13 user guide and the Cloud Connect overview. No lab.

Documentation

B19 — Advanced Recovery Features 10 questions

Key takeaways

  1. Secure restore scans the mounted disks with antivirus before the restore.
  2. Staged restore boots the machine in a virtual lab, runs a script (delete personal data), then restores.
  3. Instant Disk Recovery mounts one disk straight to a running VM.
  4. Restoring into a public cloud uses a helper appliance in that cloud.

Also inToastVault 4.1 4.4 4.5·Cards 4.1 4.4 4.5

The course covers: Secure restore, staged restore, Instant Disk Recovery, restore to the cloud, Veeam Explorers. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

10 questions. Three disagree with the documentation, all about where Instant Recovery can land.

Facts to know cold

  • Secure restore = antivirus scan first. Q73Q224
  • Staged restore for privacy and data-sovereignty deletions. Q54Q139
  • One bad disk: Instant Disk Recovery. Q59
  • To the cloud: helper appliance. Instant Recovery targets for a VMware backup: vSphere, Hyper-V, Nutanix AHV, and Azure since v13. The bank's keys predate v13. Q49Q78Q180
  • Explorers: Exchange restores litigation and in-place hold items; Oracle restores image-level backups taken with AAP, not RMAN plug-in backups. Q19Q164

Trap: “Instant Recovery to EC2” reads like a feature but isn't one; restore to AWS is a full restore through a helper appliance.

Drill

Run a secure restore of a test VM and an Instant Disk Recovery of its second disk. Lab 6.

Documentation

B4 — Security and Protection Considerations 10 questions

Key takeaways

  1. Configuration restore has two modes: Restore (same server, roll back) and Migrate (new server).
  2. Only an encrypted configuration backup carries stored credentials.
  3. MFA: five wrong codes lock the user for one minute. Only a Veeam Backup Administrator manages users and MFA.
  4. Locations tag infrastructure (vCenter, repositories, SOBRs) so Veeam warns before data crosses a border.

Also inToastVault 2.2 2.5 2.6 3.5 3.10·Cards 2.5 3.5 3.10

The course covers: Securing the backup server: MFA, roles, four-eyes authorization, encryption, locations for data sovereignty, configuration backup and restore. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

10 questions: the two configuration-restore modes, MFA details, and location tags, which the bank asks three times with three different keys.

Facts to know cold

  • Restore vs Migrate: jobs missing or database corrupt = Restore; new server = Migrate. Q23Q104Q158Q76
  • Passwords missing after restore: the configuration backup wasn't encrypted. Q205
  • MFA: one-minute lockout after five failures; managed by a Veeam Backup Administrator. Q66Q173
  • Locations can be set on vCenter servers, repositories and SOBRs; not on proxies or WAN accelerators. Q20Q106Q124

Trap: The location-tag questions offer one valid component each time and the keys differ. Learn the list (virtual infrastructure and repositories) rather than the letter.

Drill

Run an encrypted configuration backup, then open the restore wizard far enough to see both modes. Lab 3.

Documentation

B6 — Deploying Agents 10 questions

Key takeaways

  1. A whole physical server is protected by a Veeam Agent, with app-aware processing for SQL.
  2. Protection groups: Active Directory (scanned on a schedule), computers, CSV, and cloud machines (AWS and Azure via the cloud API).
  3. Backup policies are agent-managed: right for laptops that come and go. Jobs are server-managed.
  4. An Exchange DAG needs the Failover Cluster job type.

Also inToastVault 3.2 3.6 3.7 3.9·Cards 3.2 3.6 3.7 3.9

The course covers: Veeam Agents for Windows, Linux and cloud machines: protection groups, backup jobs and policies, recovery media, cluster and application support. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

10 questions about agents: which group type, which job type, and which feature belongs to which agent.

Facts to know cold

  • Physical SQL server: Veeam Agent. Q48Q123
  • Protection groups: AD group for one department; cloud machines for EC2 and Azure (no direct network path needed). Q77Q97Q183
  • Laptops: agent backup policy. Q217
  • Exchange DAG: Failover Cluster job type. Q8
  • Windows-only vs Linux-only: backup from storage snapshots is Windows-agent only; native LVM/Btrfs snapshots are Linux-only. Q30Q99
  • Recovery media from a standalone Windows agent can go to removable storage, optical disc or ISO, not a repository or tape. Q125

Trap: “Cloud machines” and “computers” protection groups both fit EC2 instances on paper. If the stem says the server can't reach them directly, it's cloud machines.

Drill

Create an AD-based protection group in BreadLab's BREAD.INT domain, scoped to one OU or group, and rescan it.

Documentation

B16 — Recovery Verification 9 questions

Key takeaways

  1. Virtual lab = the isolated network. Application group = which VMs start, in what order (the DC first).
  2. Production reaches lab VMs through masquerade IPs routed by the proxy appliance.
  3. Backup verification and content scan only mode checks and scans without starting VMs.
  4. Ping fails but the VM boots? Tick Automatically disable Windows Firewall.

Also inToastVault 4.5·Cards 4.5

The course covers: SureBackup: virtual labs, application groups, the proxy appliance and masquerade networks, verification tests, content and malware scans. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

9 questions, mostly naming the right piece of SureBackup.

Facts to know cold

  • Isolated test bed: a virtual lab. Q38
  • Dependencies: an application group starts the DC before the VMs that need it. Q83Q222
  • Reaching lab VMs: masquerade IPs through the proxy appliance. Q223
  • Compliance and ransomware checks: SureBackup validates and scans; the scan-only mode skips the lab. Q53Q61Q134
  • Ping fails: disable Windows Firewall in the job's advanced settings. Q172
  • Credit card numbers in a backup: a YARA rule scan. The Security & Compliance Analyzer only checks Veeam's own settings, but the bank keys it. Q185

Trap: The Security & Compliance Analyzer sounds like a data scanner. It checks the backup server's configuration against best practices, not the contents of backups.

Drill

Build a virtual lab and an application group with a DC and one member server, then run a SureBackup job. Lab 9.

Documentation

B7 — Unstructured Data Backup 8 questions

Key takeaways

  1. Add the share to the inventory first: NAS filer, SMB or NFS share, or a managed file server.
  2. A general-purpose backup proxy reads the files. Put it and the cache repository near the NAS.
  3. The cache repository stores metadata that tracks changed files, so incrementals are fast.
  4. A second copy is the job's secondary repository, not a backup copy job.

Also inToastVault 3.8·Cards 3.8

The course covers: Unstructured data: file shares (SMB, NFS, NAS filer), object storage sources, general-purpose proxies, cache repositories, secondary copies, instant file share recovery. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

8 questions, all on the pieces of a file share backup and where to place them.

Facts to know cold

  • First step: add the file share under Inventory. Q31
  • Components: a general-purpose backup proxy; a cache repository holding change-tracking metadata. Q121Q98Q215
  • Faster NAS backup: proxy and cache on the same network as the NAS. Q11
  • More than one copy: a secondary copy in the job. Q64
  • SOBR placement: data on the dedup extent, metadata on SSD. Q167
  • Supported: NFS file shares (not ESXi hosts, HP-UX or AS/400). Q156

Trap: “Archive repository” appears next to “secondary copy”. Archive is long-term storage of old versions, not a second copy.

Drill

Back up an SMB share from gnas with a cache repository on the backup server, change a few files, and run again.

Documentation

B17 — Veeam Backup Enterprise Manager 7 questions

Key takeaways

  1. Enterprise Manager federates many backup servers: central licensing and RBAC.
  2. A Restore Operator can be limited to restore types: files, databases (SQL and Oracle) and more.
  3. The Self-Service File Restore Portal lets users restore from their own VMs.
  4. SAML needs an identity provider and a user or group in Enterprise Manager.

Also inToastVault 2.5 4.4 4.5·Cards 2.5 4.4 4.5

The course covers: Veeam Backup Enterprise Manager: one view over many backup servers, licensing, roles, self-service restore, application item restore, SAML. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

7 questions, each a single Enterprise Manager capability.

Facts to know cold

  • Three backup servers, one place: Enterprise Manager. Q18
  • Restore Operator scopes: file items, databases. Q10Q174Q33
  • Self-service: the file restore portal for developers. Q72
  • What it restores: PostgreSQL instances among others. Q137
  • SAML: IdP configuration and a user account; Entra ID admin rights aren't required, though the bank includes them. Q181

Trap: The backup console can do everything Enterprise Manager can for one server. Enterprise Manager is the answer when the stem says many servers, delegated restores or self-service.

Drill

Install Enterprise Manager, add the backup server, and create a Restore Operator scoped to file items.

Documentation

B12 — Replication 6 questions

Key takeaways

  1. Seeding builds the first replica from a backup at the DR site; mapping links to an existing VM there. Both cut WAN traffic.
  2. CDP captures writes with the Veeam I/O filter through VAIO.
  3. CDP RPO: minimum 2 seconds, 15 seconds or more recommended, up to 60 minutes.
  4. CDP replicas can roll back to a point seconds or minutes earlier.

Also inToastVault 3.5 3.6·Cards 3.5 3.6

The course covers: VM replication, replica seeding and mapping, CDP policies and the I/O filter, CDP proxies, short-term restore points. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

6 questions: seeding and mapping benefits, and CDP basics.

Facts to know cold

  • Seeding and mapping: both reduce WAN traffic. Q51Q90
  • CDP mechanics: VAIO, 2-second minimum RPO. Q216Q211
  • CDP restore points a few seconds back; the tool for tenants who accept no data loss. Q159Q160

Trap: “CBT” is offered as how CDP captures writes. CBT is for snapshot-based backup and replication; CDP uses the VAIO I/O filter.

Drill

Replicate one VM with seeding from an existing backup and compare the first run's transfer size with a normal replica. Lab 8.

Documentation

O1 — Deploying and Connecting Veeam ONE 6 questions

Key takeaways

  1. Veeam ONE connects to vCenter/ESXi, Hyper-V and Backup & Replication servers. Agents are seen through VBR.
  2. Web Client on port 1239. v13's Veeam Analytics Service (port 2805) collects from backup servers.
  3. Protected VMs reports list what has no backup.

Also inToastVault 5.1·Cards 5.1

The course covers: Veeam ONE architecture and installation, the Veeam ONE Client and Web Client, connecting vSphere, Hyper-V and backup servers. Modules 1 to 4 of the course. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).

What the bank actually tested

6 questions, mostly “which product answers this”. The answer is Veeam ONE whenever the stem asks for reports across the environment.

Facts to know cold

  • Sources: Hyper-V servers and VBR servers (plus vCenter). Q170
  • Install it first so it can spot infrastructure problems before backups run. Q60
  • Unprotected VMs and success reports: Veeam ONE. Q146Q147
  • v13 numbers: Web Client 1239; Veeam Analytics Service. Q225Q226

Trap: Enterprise Manager also reports across backup servers, but it can't see unprotected VMs: it only knows about jobs. “Not protected” means Veeam ONE.

Drill

Install Veeam ONE Community Edition and connect the ESXi host and the backup server. Lab 10.

Documentation

O2 — Monitoring, Alarms and Remediation 6 questions

Key takeaways

  1. Infrastructure View = hypervisors and datastores. Data Protection View = backup servers and repositories.
  2. Suspicious incremental backup size flags ransomware-like growth.
  3. Remediation actions can run automatically or after approval. Intelligent Diagnostics matches VBR logs to known issues.

Also inToastVault 5.2 5.3·Cards 5.2 5.3

The course covers: Monitoring virtual and backup infrastructure, alarms and their remediation actions, Intelligent Diagnostics. Modules 5 to 8. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).

What the bank actually tested

6 questions on where things are and which alarm does what.

Facts to know cold

  • Datastore capacity: Infrastructure View, Datastores. Q67Q188
  • Repository capacity: Data Protection View. Q56
  • Ransomware sign: Suspicious incremental backup size alarm. Q228
  • Approved fixes: remediation action with approval. Known issues without support: Intelligent Diagnostics. Q230Q96

Trap: Business View appears as a distractor for capacity questions. It groups objects by business meaning; capacity lives in the Infrastructure and Data Protection views.

Drill

Lab 10.

Documentation

Tier 3 deep dive

B8 — Optimizing Your Backups 4 questions

Key takeaways

  1. Reverse incremental: 3 I/O per changed block, newest point always the .vbk. It is deprecated in v13.
  2. Synthetic full: built from existing points, no production read, 2 I/O per block.
  3. Object storage target: raise the block size to 4 MB for fewer, larger objects.

Also inToastVault 3.2·Cards 3.2

The course covers: Backup methods and their repository I/O, synthetic and active fulls, block size and storage optimisation, compression and deduplication settings. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

4 questions, three of them the method table.

Facts to know cold

  • 3x I/O and newest point is a full: reverse incremental. Q208Q209
  • New full with no production read: synthetic full. Q210
  • Object storage tuning: 4 MB blocks. Q151

Trap: Reverse incremental still appears in the bank, but v13 marks it deprecated. Learn its behaviour for the exam and don't design with it.

Drill

Run one job per method against a small VM and watch the files on disk change.

Documentation

B13 — Long-term Retention 2 questions

Key takeaways

  1. Back up to disk first, then a backup to tape job copies those backups.
  2. Tape jobs write to media pools, so create the pools first.

Also inToastVault 3.10·Cards 3.10

The course covers: Long-term retention: GFS, tape infrastructure (tape servers, libraries, media pools), backup to tape and file to tape jobs. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

2 questions, both on the order of tape steps.

Facts to know cold

  • Order: backup jobs, then media pools, then backup to tape jobs. Q21Q44

Trap: “File to tape” can back up VMs' files, but it loses image-level restore. For VMs the answer is backup to tape.

Documentation

B15 — Move and Copy Backups with VeeaMover 2 questions

Key takeaways

  1. Move backup moves the files and repoints the job in one step; changing the job's target alone starts a new full.

Also inToastVault 2.3 3.4·Cards 2.3 3.4

The course covers: VeeaMover: moving and copying backups between repositories and jobs, keeping block clone, evacuating SOBR extents. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

2 questions: consolidating after a merger and leaving a ReFS server.

Facts to know cold

  • Move backup for mergers and repository migrations; copying files by hand breaks the link to the job. Q114Q155

Trap: Evacuate is only for SOBR extents.

Documentation

B24 — Enterprise Plugins 2 questions

Key takeaways

  1. Plug-ins use the database's own tools (RMAN, HANA) for transactionally consistent database and log backups, not whole-server images.

Also inToastVault 3.7 3.9·Cards 3.7 3.9

The course covers: Plug-ins for Oracle RMAN, SAP HANA, SAP on Oracle, Microsoft SQL and others, which send native database backups to Veeam repositories. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

2 questions.

Facts to know cold

  • Oracle with tight RPO: RMAN plug-in, daily database plus frequent archived redo logs. Q2
  • What plug-ins produce: consistent database and log backups. Q41

Documentation

O3 — Reports, Dashboards and Business View 2 questions

Key takeaways

  1. Scheduled capacity reports come from the Web Client.
  2. Business View categories group alarms and reports by department.

Also inToastVault 5.3 5.4·Cards 5.3 5.4

The course covers: Reports, report branding and SSRS, dashboards, Business View categories. Modules 9 and 10. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).

What the bank actually tested

2 questions.

Facts to know cold

  • Quarterly capacity report: Web Client. Q189
  • By department: Business View categories. Q229

Drill

Lab 10.

Documentation

O4 — Capacity Planning, Deployment Projects and v13 Security 2 questions

Key takeaways

  1. Capacity planning projects the date a repository fills.
  2. Deployment Projects model adding hosts and VMs before you buy.

Also inToastVault 5.3 5.4·Cards 5.3 5.4

The course covers: Capacity planning, Deployment Projects (what-if modelling), and the v13 additions: Security & Compliance dashboards and Threat Center. Modules 11 and 12. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).

What the bank actually tested

2 questions.

Facts to know cold

  • Days until full: capacity planning. Q227
  • Justify a purchase: Deployment Projects. Q149

Documentation

R2 — Orchestration Plans 2 questions

Key takeaways

  1. A restore plan recovers from backups into vSphere; a replica plan fails over replicas.
  2. Custom plan steps are PowerShell.

Also inToastVault 6.2·Cards 6.2

The course covers: Orchestration plans (replica, restore, CDP, storage and cloud plans), plan steps, custom PowerShell steps, plan groups. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).

What the bank actually tested

2 questions, both from the guide.

Facts to know cold

  • Plan types: restore plan from backups. Q231
  • Custom steps: PowerShell. Q234

Documentation

R3 — Readiness Checks, DataLabs and Testing 2 questions

Key takeaways

  1. Readiness check: fast, no VMs started, checks config and RPO.
  2. A DataLab overlays a VBR virtual lab, so the virtual lab must exist first.

Also inToastVault 6.3 6.4·Cards 6.3 6.4

The course covers: Readiness checks, DataLabs (built on VBR virtual labs), the Lab Calendar and automated plan tests. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).

What the bank actually tested

2 questions.

Facts to know cold

  • DataLab prerequisite: a virtual lab in VBR. Q232
  • Quick check without starting VMs: readiness check. Q233

Documentation

R4 — Plan Execution and Reports 2 questions

Key takeaways

  1. Proof of a DR test for an auditor: the DataLab Test report.
  2. After a replica plan: failback, then commit once production is confirmed.

Also inToastVault 6.3 6.5·Cards 6.3 6.5

The course covers: Running plans, failback and commit, and the four report types: Plan Definition, Readiness Check, DataLab Test, Plan Execution. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).

What the bank actually tested

2 questions.

Facts to know cold

  • Audit proof: DataLab Test report. Q235
  • Going home with changes: failback, then commit. Q236

Documentation

B22 — Malware Detection 1 question

Key takeaways

  1. Malware alerts to the security team: the Notifications section of Malware Detection Settings.

Also inToastVault 2.5·Cards 2.5

The course covers: Inline entropy and file-index malware detection, YARA scans, the Malware Detection settings, notifications, marking restore points clean or infected. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

1 question. The blueprint tests more of this than the bank does.

Facts to know cold

  • Who gets told: Malware Detection Settings, Notifications. Q166

Documentation

B27 — Veeam Calculators 1 question

Key takeaways

  1. More jobs on one server: re-check backup server CPU and RAM sizing.

Also inToastVault 1.5

The course covers: Sizing the backup server, proxies and repositories with the Veeam calculators. Course: VBR v13: Configure, Manage and Recover.

What the bank actually tested

1 question.

Facts to know cold

  • Merger adds workloads: confirm backup server CPU and RAM. Q143

Documentation

Blueprint cross-reference

The exam is written against six blueprint domains, not the courses. ToastVault splits them into 35 topics; each row links to the topic’s notes, the modules that teach it, and the practice questions that tested it.

TopicToastVault headingModulesPractice Qs
1.1RPO, RTO and the 3-2-1-1-0 ruleB1Q6Q24Q74Q81Q84Q133Q162Q163Q175Q177Q182Q192Q193Q198
1.2Transport modes (VMware vSphere)B11Q29Q32Q43Q63Q103Q110Q145Q168Q194Q199
1.3Ports you should knowB3, B11Q75Q190Q195Q196Q197
1.4Permissions—none
1.5Designing a solutionB1, B11, B27Q34Q71Q107Q116Q143Q186
2.1Installing the backup serverB3, B11Q26Q112Q144Q157Q161Q169Q187Q206
2.2Backup infrastructure componentsB3, B4, B11Q20Q106Q124Q141Q207
2.3Scale-Out Backup Repository (SOBR)B3, B14, B15Q1Q5Q15Q57Q120Q127Q131Q135Q142Q154Q155Q184Q203Q204
2.4Hardened repository and immutabilityB3, B10, B14Q4Q13Q86Q93Q117Q119Q122Q136Q153Q165Q200Q201Q202
2.5Security featuresB3, B4, B11, B17, B22Q7Q10Q18Q33Q40Q92Q130Q132Q166Q173Q174Q181Q205
2.6Security best practicesB4Q66
3.1Backup files—none
3.2Backup methods and their I/O costB6, B8, B9, B10Q62Q125Q150Q151Q208Q209Q210
3.3Retention and GFSB10Q25
3.4Backup copy jobsB9, B10, B15Q16Q28Q42Q58Q65Q68Q69Q87Q88Q95Q105Q108Q114Q115Q126Q179Q212
3.5ReplicationB4, B12, B21Q51Q76Q90Q213
3.6Continuous Data Protection (CDP)B5, B6, B9, B12Q47Q77Q159Q160Q171Q211Q216
3.7Application-aware and guest processingB3, B5, B6, B24Q2Q8Q14Q17Q30Q35Q39Q50Q85Q89Q91Q97Q99Q123Q152Q178Q191Q214
3.8NAS (unstructured data) backupB7Q11Q31Q64Q98Q121Q156Q167Q215
3.9Physical workloads and enterprise plug-insB3, B6, B24Q3Q41Q45Q48Q183Q217
3.10MaintenanceB4, B5, B13Q21Q23Q44Q79Q104Q158
4.1Restore operationsB19, B20, B21Q22Q27Q36Q49Q52Q59Q73Q78Q80Q94Q111Q138Q140Q148Q164Q180Q218Q224
4.2Instant RecoveryB20, B21Q37Q46Q82Q100Q128Q129Q219Q220
4.3File-level restoreB20Q176
4.4Veeam ExplorersB5, B17, B19Q19Q137Q221
4.5SureBackup and virtual labsB16, B17, B19, B20, B21Q9Q12Q38Q53Q54Q55Q61Q70Q72Q83Q101Q102Q109Q113Q118Q134Q139Q172Q185Q222Q223
5.1Veeam ONE architectureO1Q60Q146Q147Q170Q225Q226
5.2AlarmsO2Q228Q230
5.3Dashboards, views and protected workloadsO2, O3, O4Q56Q67Q96Q149Q188Q229
5.4Capacity planning and reportsO3, O4Q189Q227
6.1Veeam Recovery Orchestrator (VRO) components—none
6.2Orchestration plansR2Q231Q234
6.3Readiness checks, tests and running a planR3, R4Q233Q236
6.4DataLabsR3Q232
6.5ReportsR4Q235

Where the courses and this bank run thin

Passing the practice bank is not the same as covering the blueprint. Compare the exam’s domain weights with where this bank’s questions fall:

DomainTitleExam weightBank QsBank share
1Fundamentals, Strategy & Design14%3515%
2Deployment, Configuration & Security20%5423%
3Data Protection & Maintenance26%7431%
4Recovery & Verification15%5122%
5Analytics, Monitoring & Observability13%167%
6Orchestration & Disaster Recovery10%63%

Domains 5 and 6, Veeam ONE and Recovery Orchestrator, carry 23% of the real exam and very little of this bank. Read their ToastVault notes in full and rate yourself on the blueprint checklist; that is where this bank will mislead you about your readiness.

These ToastVault topics have one practice question or none:

And these course modules have no questions in the bank at all:

Malware detection (B22) deserves the most attention of these: the v13 exam leans on inline detection, YARA scans and marking restore points clean or infected, and this bank asks about it once.

Six-week plan

Weeks 1–2 — Tier 1

  • Day 1: rate yourself on the blueprint checklist so you have a baseline.
  • Days 2–4: B11 proxies, transport modes and ports. Lab 1.
  • Days 5–6: B10 hardened repositories and B14 SOBR. Lab 2 and Lab 5.
  • Days 7–8: B9 backup copy jobs. Lab 4.
  • Days 9–11: B20 and B21, every restore and failover. Lab 6, Lab 7, Lab 8.
  • Days 12–14: B1 and B5, then flashcards filtered to Tier 1 until nothing is missed.

Weeks 3–4 — Tier 2 and Veeam ONE

  • Days 15–17: B16 SureBackup and B19 advanced restores. Lab 9.
  • Days 18–19: B4 security, B3 service providers, B17 Enterprise Manager. Lab 3.
  • Days 20–21: B6 agents, B7 file shares, B12 CDP.
  • Days 22–28: Veeam ONE: O1–O4 and all of ToastVault domain 5. Lab 10.

Weeks 5–6 — the gaps, then exams

  • Days 29–32: Recovery Orchestrator, R2–R4 and all of ToastVault domain 6, plus malware detection.
  • Days 33–38: one timed practice exam a day, then drill everything missed.
  • Days 39–41: What to study next tells you which modules still cost points. Go back to those labs.
  • Day 42: rest. Re-read the key takeaways boxes only.

Labs — make BreadLab show you the answer

These run on BreadLab: the R630’s ESXi host, gnas and breadweb. Each lab is built from specific practice questions. At every step, predict first, then do it and open What you should see. If v13 disagrees with this page, trust v13: note the build number and check the linked doc.

The 10 labs cover 67 of the 236 questions. The other 169 are listed at the end, grouped by why they can’t be labbed.

Lab kit

  • Veeam Backup & Replication v13 on a Windows Server VM on the R630 (ESXi), or the Veeam Software Appliance. The free Community Edition covers 10 workloads, which is plenty for every lab here; an NFR licence unlocks Enterprise Manager and the Premium features.
  • Two small test VMs on the ESXi host: a Windows Server (with SQL Express for the database labs) and an Ubuntu server.
  • An Ubuntu 24.04 VM with a second disk for the hardened repository (Lab 2). XFS, no SSH needed after setup.
  • MinIO in Docker on breadweb with Object Lock enabled on one bucket, as S3-compatible object storage (Lab 5).
  • A replica target: a second datastore, or a second ESXi host if you have one. Replication to the same host is fine for learning failover.
  • Veeam ONE Community Edition on its own Windows VM for Lab 10.
  • No Recovery Orchestrator lab. VRO has no free edition; its questions are listed at the end.

Lab 1 — Make the proxy show its transport mode

ModuleB11·QuestionsQ194Q199Q63Q43Q195·Time40 min

Five questions turn on which transport mode a proxy picks. The job log tells you, line by line.

Steps

  1. Back up the Windows test VM with the default VMware proxy (the backup server itself). Open the job session and find the line naming the transport mode.

    Predict: Which mode will a Windows backup server on the same ESXi host use?

    What you should see

    If the backup server is a VM on that host, [hotadd]. If it's physical, [nbd]. Direct SAN needs FC/iSCSI access to the LUN that a lab rarely has.

  2. Add a second Windows VM as a proxy, set its mode to Virtual appliance only, and remove the test VM's datastore from what the proxy's host can see (or move the test VM to a datastore that host lacks). Run again.

    Predict: Does the job fail?

    What you should see

    No. With the default Failover to network mode ticked, it falls back to [nbd]. That is Q199. Untick it and the job fails.

  3. On the backup server, run Test-NetConnection <esxi> -Port 902.

    Predict: What is port 902 for?

    What you should see

    NFC traffic for Network mode. That is Q195. 443 is the vSphere API to vCenter.

Lab 2 — Build a hardened repository and try to break it

ModuleB10·QuestionsQ200Q201Q202Q4Q117Q122Q165·Time60 min

Seven questions are about what immutability allows. Trying to delete a locked file answers most of them.

Steps

  1. Format the Ubuntu VM's second disk as XFS with reflink (mkfs.xfs -b size=4096 -m reflink=1,crc=1 /dev/sdb), mount it, and add it as a Hardened Repository with single-use credentials.

    Predict: After the wizard finishes, are the credentials anywhere in Veeam?

    What you should see

    No. They are used once to deploy the data mover and discarded. That is Q202. The account can be removed from sudoers afterwards.

  2. Set immutability. Try 3 days.

    Predict: Will the wizard accept it?

    What you should see

    No: the minimum is 7 days (Q200).

  3. Create a job to this repository with reverse incremental.

    Predict: What happens?

    What you should see

    The wizard refuses or warns: reverse and forever forward rewrite the full. Use forward incremental with synthetic fulls (Q201).

  4. After one run, SSH in and run sudo rm on the .vbk, then lsattr on it.

    Predict: Can root delete it?

    What you should see

    No. lsattr shows the i (immutable) flag. Raise the period in the repository settings and watch it apply on the next run (Q122).

Lab 3 — Configuration backup, both restore modes

ModuleB4·QuestionsQ205Q23Q104Q158Q76·Time20 min

The bank asks about the two configuration restore modes five times.

Steps

  1. Run a configuration backup with encryption off, then one with it on.

    Predict: Which one carries your stored credentials?

    What you should see

    Only the encrypted one (Q205).

  2. Open Configuration Backup > Restore and stop at the mode screen.

    Predict: What are the two modes?

    What you should see

    Restore (same server, roll back) and Migrate (new server). Q23, Q104, Q158 and Q76.

Lab 4 — Two copy jobs, two modes

ModuleB9·QuestionsQ16Q65Q88Q212Q47Q87·Time40 min

Six questions, three of them the same one with three different keys. Opening the job settings settles it.

Steps

  1. Create a backup copy job in immediate mode and another in periodic mode from the same source job. Set an RPO monitor of 8 hours and a copy window on the periodic one.

    Predict: Where does each read from?

    What you should see

    The source job's backup files on the repository, not the VM (Q212).

  2. Run the source job three times quickly. Compare points on the target.

    Predict: How many points does each copy job hold?

    What you should see

    Immediate: three. Periodic: one, the latest in its interval.

  3. Open the immediate job's properties and look for a way to switch it to periodic.

    Predict: Can you?

    What you should see

    No. The mode is set at creation. To change it, create a new job and delete the old one: our reading of Q16, Q65 and Q88.

Lab 5 — A SOBR with MinIO as capacity tier

ModuleB14·QuestionsQ15Q120Q203Q204Q57·Time60 min

Five SOBR questions come down to copy vs move and sealed chains.

Steps

  1. On breadweb, start MinIO in Docker, create a bucket with Object Lock, and add it to Veeam as an S3-compatible object repository.

    Predict: Can you add it as immutable?

    What you should see

    Yes, when Object Lock is on at bucket creation.

  2. Build a SOBR: the Lab 2 hardened repository as performance tier (placement Data locality), MinIO as capacity tier with Copy on. Run a job.

    Predict: When does data appear in MinIO?

    What you should see

    Right after the backup: copy mode (Q15).

  3. Switch to Move after 0 days on a forever forward incremental job. Run the offload.

    Predict: Does anything move?

    What you should see

    No: the only chain is active. Add a weekly synthetic full; once a new chain starts, the old one seals and moves (Q203).

Lab 6 — The restore ladder

ModuleB20·QuestionsQ27Q80Q218Q59Q94Q128Q73Q224·Time60 min

Eight questions ask which restore fits a failure. Doing each once makes the choice obvious.

Steps

  1. Install a bad update or change a registry key on the Windows VM, then do an Entire VM restore with Quick rollback.

    Predict: How long does it take compared with a full restore?

    What you should see

    Seconds to minutes: only changed blocks come back (Q218).

  2. Delete the VM's .vmx from the datastore, then use Restore VM files for just that file and re-register.

    Predict: Did you lose any data?

    What you should see

    No. The disks never left (Q94).

  3. Use Instant Disk Recovery to attach the second disk from backup to the running VM.

    Predict: Does the VM need to stop?

    What you should see

    No (Q59).

  4. Run a guest file restore with the VM's network adapter disconnected.

    Predict: How does Veeam reach the guest?

    What you should see

    Through VMware Tools (VIX), Q128.

  5. Run one restore with Secure restore ticked.

    Predict: When does the scan happen?

    What you should see

    Before the data is written back (Q73, Q224).

Lab 7 — Instant Recovery and migrate to production

ModuleB21·QuestionsQ219Q100Q129Q220·Time30 min

Four questions on what Instant Recovery actually is.

Steps

  1. Instant-recover the Ubuntu VM to the ESXi host. In vSphere, look at its datastore.

    Predict: Where are its disks?

    What you should see

    On a datastore named VeeamBackup_<mount server>: vPower NFS on the mount server (Q219).

  2. Finish with Migrate to production.

    Predict: What moves it?

    What you should see

    Storage vMotion if licensed, otherwise Veeam Quick Migration (Q100, Q129, Q220).

Lab 8 — Failover, undo, failback, plans

ModuleB21·QuestionsQ9Q118Q12Q55Q101Q102Q113Q109Q148Q213Q52Q51Q90·Time60 min

Thirteen questions. This is the lab that pays most.

Steps

  1. Replicate both test VMs to the replica target. On the second job, use seeding from an existing backup.

    Predict: How much data does the seeded job move on its first run?

    What you should see

    Only the changes since the backup (Q51, Q90).

  2. Create a failover plan: Windows first, Ubuntu 60 seconds later. Run it.

    Predict: What do you see?

    What you should see

    Replicas start in order with the delay (Q12, Q55, Q101, Q102, Q113). The plan then offers Undo, Start, Edit, Delete (Q109).

  3. Make a change on the Windows replica, then Undo failover.

    Predict: Is the change on the original?

    What you should see

    No. Undo discards it (Q148, Q213).

  4. Run a Planned failover, change a file, then Failback to production and Commit failback.

    Predict: Is the change on the original now?

    What you should see

    Yes. Failback carries it home (Q52). Planned failover is the answer for a known outage (Q9, Q118).

Lab 9 — SureBackup in a virtual lab

ModuleB16·QuestionsQ38Q83Q222Q223Q172Q134·Time60 min

Six questions on the parts of SureBackup.

Steps

  1. Create a virtual lab with a proxy appliance and masquerade network.

    Predict: How will you reach lab VMs from your desktop?

    What you should see

    Through masquerade IPs routed via the proxy appliance (Q223).

  2. Create an application group with a DC (from BREAD.INT's backup if you have one) and the Windows VM. Run a SureBackup job.

    Predict: What starts first?

    What you should see

    The DC (Q83, Q222).

  3. If the ping test fails while the heartbeat passes, tick Automatically disable Windows Firewall.

    Predict: Does ping pass now?

    What you should see

    Yes (Q172).

  4. Switch the job to Backup verification and content scan only.

    Predict: Do any VMs start?

    What you should see

    No (Q134).

Lab 10 — Veeam ONE: views, alarms, Business View

ModuleO2·QuestionsQ225Q226Q67Q188Q56Q228Q230Q229·Time60 min

Most of the Veeam ONE questions are “where is it”.

Steps

  1. Install Veeam ONE Community Edition and open the Web Client.

    Predict: Which port is in the URL?

    What you should see

    1239 (Q225). The v13 Veeam Analytics Service gathers from backup servers (Q226).

  2. In the Veeam ONE Client, find datastore free space and repository free space.

    Predict: Same view?

    What you should see

    No. Datastores are under Infrastructure View (Q67, Q188); repositories under Data Protection View (Q56).

  3. Open the alarm list, find Suspicious incremental backup size, and add a remediation action that needs approval.

    Predict: What does the alarm look for?

    What you should see

    Abnormal increment growth (Q228). Approval-gated actions are Q230.

  4. Create a Business View category by department.

    Predict: Where does it show up?

    What you should see

    In alarms and reports grouped by that category (Q229).

Questions with no lab

Timed practice exam

A mock exam from the full question bank: 100 questions, 150 minutes, the real exam’s length and clock, drawn from all 236. Question order and answer order are shuffled every time, so you can’t pass by remembering that it was “B”. You get no feedback until you submit, and a blank counts as wrong. The real exam is scaled (724 of 1000 to pass), so treat the 73% mark here as a target, not the official cut. Every attempt is saved to your account.

The exam needs the full questions. If they aren’t loaded yet, Start will ask you to sign in first.

What to study next

This builds itself from the questions you answer in flashcard mode, or mark on the cards below. It ranks the modules you get wrong most often, and gives you the module, its labs and the exact questions to go back to. Once you load the full questions, your answers are saved to your account. Before that, they stay in this browser.

Question index — all 236, with the documentation that settles them

Each entry gives the question in one line, the keyed answer, and why, with the Veeam page that settles it. Q1–Q192 are paraphrased; Q193–Q236 are the study guide’s own questions, in full. Press Load full questions to swap in the real question text and options. That bank is private and needs the site password.

Q1 B14

Where a Jan 1 GFS weekly lives on Mar 20 in a SOBR with a capacity tier (exhibit lost).

Answer: C

Hedged. The SOBR settings were in a lost screenshot. Jan 1 to Mar 20 is about 11 weeks. That is past the 31 day chain but inside the 14 week GFS window, so the point still exists. Which tier holds it depends on the missing move and archive settings. The bank's own date math is also wrong. Scale-Out Backup Repositories

Q2 B24

Protecting an Oracle database that holds all the company's images, with a daily schedule.

Answer: B

The RMAN plug-in uses Oracle's own backup tool. A daily database backup plus archived redo log backups every 15 minutes protects the data well. It keeps data loss small when new photos arrive at random times. Veeam Plug-in for Microsoft SQL

Q3 B3

Which two operating systems Veeam Agents can back up.

Answer: B, E

Veeam Agents run on Windows and on Linux, such as Ubuntu. There is no agent for FreeBSD, IBM iSeries, or iOS (Apple phones). System Requirements

Q4 B10 Lab 2

Meeting 3-2-1 plus 31 days of undeletable backups for backups sitting on a NAS.

Answer: D, E

A NAS repository cannot be made immutable (locked from change). A Linux Hardened Repository can lock the local backups. Turning on S3 Object Lock locks the offsite copy too. The copy job already keeps 24 monthly points, so the 2 year rule is met. Hardened Repository

Q5 B14

A SOBR on AWS S3 as performance tier needs cheap long-term monthly GFS points.

Answer: C

Since v12, a SOBR whose performance tier is object storage can send backups straight to an archive tier. No capacity tier is needed. You add an archive extent that points to S3 Glacier. You do not make a Glacier vault yourself. Veeam documentation

Q6 B1

What an RPO describes.

Answer: D

RPO (Recovery Point Objective) is how much data, in time, you can afford to lose. Downtime is RTO (Recovery Time Objective), not RPO. Backup Methods

Q7 B11

Doing every task without logging on to the backup server locally or over RDP.

Answer: C

Install the Veeam console on your own PC. It connects to the backup server over the network and gives the full set of tasks. Enterprise Manager only covers some tasks. v13: v13 also adds a web UI on the backup server, but the installed console is still the full tool. Transport Modes

Q8 B6

The Exchange DAG setting in a Veeam Agent for Windows job.

Answer: D

An Exchange DAG (database availability group) is built on Windows failover clustering. So the agent job must use the Failover Cluster type to back it up the right way. Protection Groups

Q9 B21 Lab 8

Starting replicas at Site B before a planned overnight power outage at Site A (exhibit lost).

Answer: B

The outage is known ahead of time. Planned failover first syncs the latest changes to the replica, then switches over. So almost no data is lost. The diagram is missing, but the answer does not depend on it. Failover Plans

Q10 B17

Granular restore permissions available to the Enterprise Manager Restore Operator role.

Answer: D

In Enterprise Manager you can limit a Restore Operator to certain restore types. File items is one of them. SharePoint, AD and OneDrive items are not choices there. Veeam Backup Enterprise Manager

Q11 B7

Speeding up NAS file share backup from the main site.

Answer: A

NAS backup reads many small files over the network. Putting the proxy and cache repository on the same network as the NAS cuts delay and speeds up the job. Unstructured Data

Q12 B21 Lab 8

Starting some replicas on a time delay during failover.

Answer: A

A failover plan lets you set the start order of replicas and a delay between them. Application groups belong to SureBackup, not failover. Failover Plans

Q13 B3

What a service provider can deploy from Service Provider Console 7.0.

Answer: C

Veeam Service Provider Console can install Veeam Backup & Replication on managed client sites. It manages the other products but does not deploy them here. System Requirements

Q14 B5

Enabling guest file indexing for a Windows VM job when the guest is unreachable (exhibit lost).

Answer: A

Hedged. The network diagram is missing. Without VMware Tools (VIX), a guest interaction proxy must reach the VM over the network. Which server can do that depends on the lost picture, so A or C could be right. Application-Aware Processing

Q15 B14 Lab 5

A backup that copies itself to different media offsite automatically.

Answer: B

A capacity tier in Copy mode copies each new backup to object storage right away. That gives a second copy, on another media type, off site, with no extra job. Scale-Out Backup Repositories

Q16 B9 Lab 4

Changing a backup copy job from periodic to immediate mode (first of three versions).

Answer: C

Disputed key. The bank keys C; the documentation supports D. You cannot switch an existing backup copy job between periodic and immediate mode. The two modes build chains in different ways. You must make a new job in immediate mode and remove the old one. Backup copy job name (v11 docs)

Q17 B5

The steps to create a backup job for new domain controllers.

Answer: A

The first job skipped guest processing, so backups were crash consistent (like pulling the power). Turning on application-aware processing uses VSS to quiesce the domain controller first. Only A includes that step plus a destination. Application-Aware Processing

Q18 B17

Central licensing and RBAC across three backup servers in three data centres.

Answer: D

Enterprise Manager links many backup servers. It gives one place for licenses and role-based access. It is the least work of the choices. Veeam Backup Enterprise Manager

Q19 B19

A feature of Veeam Explorer for Microsoft Exchange.

Answer: C

Veeam Explorer for Exchange can restore items under litigation hold and in-place hold. Password restore is an AD Explorer feature. BAK export is a SQL feature. Secure Restore

Q20 B4

The component that takes a GDPR location tag (first of three versions).

Answer: A

Location tags mark where data lives, for data rules like GDPR. You can set them on virtual infrastructure like vCenter servers and on repositories. Not on WAN accelerators or proxies. Managing Configuration Database

Q21 B13

Getting VMware VMs and physical Windows servers to tape.

Answer: D

Back up the VMs and physical servers to disk first. Then a backup to tape job copies those backups to tape. This keeps image-level restore and is the most efficient way. Tape Servers

Q22 B20

What file-level restore to the original location of a shared drive needs.

Answer: D

In guest file restore you can use Copy To. It saves files to a local folder or a network share given as a UNC path, like \\server\share. Quick Rollback

Q23 B4 Lab 3

Rolling the configuration back after jobs went missing over the weekend.

Answer: C

Configuration restore has two modes. Restore rolls the same server back to an older state. Migrate moves the setup to a new server. Managing Configuration Database

Q24 B1

Which restore point is valid at 10:00 with a 4-hour RPO.

Answer: A

The best restore point is the newest one before the disaster. 9:30 AM loses only 30 minutes of data. 1 PM is after the disaster. Backup Methods

Q25 B10

When a point becomes deletable with 60-day immutability on a hardened repository.

Answer: C

The GFS monthly point keeps its own retention of 6 months, and on a hardened repository it stays locked for that time. From 27 May that ends on 27 Nov. Retention removes it the next day, 28 Nov. Hardened Repository

Q26 B11

Why Backup from Storage Snapshots on a Nimble array falls back to normal backup.

Answer: B

Backup from storage snapshots only works if Veeam knows the array. You must add the Nimble array under Storage Infrastructure first. Transport Modes

Q27 B20 Lab 6

When Quick Rollback can be used for a Windows VM on VMware.

Answer: D

Quick Rollback restores only changed blocks to the same VM in its original place. It suits guest OS problems like user mistakes or malware. It is not for storage faults or moving the VM. Quick Rollback

Q28 B9

Copying VM and agent backups to the alternate site on a schedule.

Answer: D

Disputed key. The bank keys D; the documentation supports B. A normal backup copy job, periodic or not, cannot copy file share backups. You add a secondary repository in the file share backup job, with its own retention. Veeam then makes the copy job for you. File share backup secondary target

Q29 B11

The proxy for Hyper-V VMs on local storage.

Answer: D

With on-host mode, the Hyper-V host itself acts as the proxy. It reads VM disks on local storage. Off-host needs shared storage. Transport Modes

Q30 B6

A feature only Veeam Agent for Microsoft Windows has.

Answer: B

Backup from storage snapshots for agent jobs works only with the Windows agent. Linux agents can do volume and file backups, and app-aware PostgreSQL is a Linux feature. Protection Groups

Q31 B7

The step before you can create a NAS backup job.

Answer: D

Before a NAS backup job, the share must be added to the inventory. You add a file share and pick its type. NAS filer is used for enterprise storage arrays; SMB or NFS share is the other choice. Unstructured Data

Q32 B11

Backing up encrypted vSphere VMs when security outranks everything.

Answer: B

Encrypted vSphere VMs cannot use Direct SAN mode. NBDSSL sends data over an encrypted network link. With job encryption on, the data stays encrypted end to end. Transport Modes

Q33 B17

Letting SQL DBAs restore their own databases without wider access.

Answer: C

In Enterprise Manager you can give a group the Restore Operator role and limit it to SQL database restores. That gives the DBAs only what they need. Veeam Backup Enterprise Manager

Q34 B11

Scaling an all-in-one backup server that has outgrown itself.

Answer: C

The job stats show the proxy is the bottleneck (slowest part). Adding another proxy spreads the work. Splitting jobs on the same proxy would not help. Transport Modes

Q35 B5

Protecting a snapshot-sensitive SQL VM that may only be snapshotted at 03:00.

Answer: A, E

The VM snapshot runs once a day. To meet a 1 hour RPO for databases, turn on transaction log processing. Then set SQL logs to back up on a schedule, like every hour. Application-Aware Processing

Q36 B20

Getting users back to their files after the NAS hardware dies.

Answer: B

Instant file share recovery publishes the share straight from the backup. Users can work again fast while you fix or replace the NAS. Quick Rollback

Q37 B20

Recovering a damaged physical Linux server onto vSphere quickly.

Answer: A

Instant VM Recovery can start a Linux agent backup as a vSphere VM right away. Users can reach it in minutes, which gives the lowest RTO. Quick Rollback

Q38 B16 Lab 9

Testing OS updates against an app in an isolated non-production environment.

Answer: C

A virtual lab is an isolated sandbox. You can start VMs from backups there and test updates without touching production. SureBackup

Q39 B5

A job that picks up new VMware-hosted SQL servers by itself.

Answer: A

If the job targets a vSphere tag, any new VM given that tag is added on the next run. No manual edit is needed. Application-Aware Processing

Q40 B11

The API for automating Veeam Backup & Replication.

Answer: B

The backup server has its own REST API for automation. Veeam ONE has a separate API. PowerShell runs on the backup server, not through Enterprise Manager. Transport Modes

Q41 B24

What kind of backup the enterprise application plug-ins produce.

Answer: B

Plug-ins work with the app's own backup tools, like RMAN or SAP HANA. They make transaction consistent backups of the database and its logs, not the whole server. Veeam Plug-in for Microsoft SQL

Q42 B9

Copying seven Hyper-V VMs' daily backups offsite with long retention.

Answer: D

62 days of short-term retention covers any day within two months. 26 weekly GFS points covers any week within six months. Only D has both. Backup Copy

Q43 B11 Lab 1

Backing up VMs on an FC SAN with the least impact on hosts.

Answer: C

Direct storage access (Direct SAN) reads VM data straight from the Fibre Channel SAN. It skips the ESXi hosts and production network, so impact is lowest. Transport Modes

Q44 B13

Getting Hyper-V VMs to tape: the order of steps.

Answer: D

Tape jobs write to media pools, so create media pools first. Then a backup to tape job puts the VM backups on tape. Media sets are made automatically. Tape Servers

Q45 B3

Which workload Veeam can protect with image-level backups.

Answer: B

Veeam has an agent for Oracle Solaris, so it can make image-level backups of it. AS/400, HP-UX and iOS have no Veeam agent. System Requirements

Q46 B20

Migrating a physical Linux file server with several large volumes to ESXi.

Answer: B

Instant VM Recovery can start the agent backup as a VMware VM right away. You then move it to production storage. The other choices need much more time. Quick Rollback

Q47 B9 Lab 4

Getting told when backups miss an 8-hour offsite copy window.

Answer: D

Backup copy jobs have an RPO monitor. You set a time, like 8 hours. Veeam alerts you if no new copy lands within that time. Backup Copy

Q48 B6

Protecting a whole physical Windows SQL server.

Answer: A

To protect a whole physical server, use the Veeam Agent. It backs up the full machine, and app-aware mode keeps SQL consistent. Note: SQL Server 2020 does not exist; the stem likely meant 2019 or 2022. Protection Groups

Q49 B19

Moving workloads from VMware backups into AWS, Azure and GCE.

Answer: D

Restoring on-prem backups to AWS, Azure or Google needs a small helper or proxy appliance in that cloud. It speeds up the restore. WAN accelerators do not work for cloud restores. Secure Restore

Q50 B5

The setting that captures both VM disks and SQL transaction logs.

Answer: D

Application-aware processing makes the SQL backup consistent. It is also the setting that unlocks SQL transaction log backup. The other choices do not handle logs. Application-Aware Processing

Q51 B12 Lab 8

The main benefit of replica seeding.

Answer: D

Seeding means the first replica is built from a backup already at the DR site. Only changes then cross the WAN. So WAN traffic goes down. Replica Seeding and Mapping

Q52 B21 Lab 8

The replication function that sends failover-time changes back to production.

Answer: A

The option reads 'Fallback' but means Failback. Failback sends the changes made on the replica back to the original VM. Undo failover throws those changes away. Failover Plans

Q53 B16

What a SureBackup-style validation proves for ransomware readiness.

Answer: B

SureBackup boots backups in an isolated lab to prove they work. It can also run a malware scan. That covers validation and security. 'Ransomware-free' is a strong claim, but B is the best fit. SureBackup

Q54 B19

Restoring a photo server while honouring customers' deletion requests.

Answer: C

Staged Restore boots the VM in a virtual lab first. A script runs there, for example to delete data for privacy rules. Then the VM goes to production. Secure Restore

Q55 B21 Lab 8

Planning in advance for apps to start in a set order during a disaster.

Answer: C

A failover plan starts replicas in a set order with delays you choose. It is made before a disaster. An application group only orders VMs inside a SureBackup test. Failover Plans

Q56 O2 Lab 10

Checking repository capacity across five backup servers in Veeam ONE.

Answer: D

In Veeam ONE Client, the Data Protection View shows backup servers and their repositories. It shows free and used repository space. The Infrastructure View shows hypervisors, not repositories. Veeam ONE 13 ports

Q57 B14 Lab 5

Adding 12 monthly GFS points when the NAS repository holds only 14 days.

Answer: D

Add object storage as a capacity tier in move mode. Backups older than 14 days leave the NAS. GFS fulls then live in the cloud. Copy-only mode would not free any space. Scale-Out Backup Repositories

Q58 B10

Getting an immutable copy of backups now on a Windows repository.

Answer: A

Periodic copy mode runs on a schedule, such as once a day. It copies only the latest point. Immediate mode and capacity tier copy mode send data as soon as each backup ends. Hardened Repository

Q59 B19 Lab 6

Fixing one corrupted data disk on a critical VMware server fastest.

Answer: A

Instant Disk Recovery mounts just the bad disk from the backup, straight to the running VM. The VM keeps working. No full VM restore is needed. Secure Restore

Q60 O1

Why install Veeam ONE before Veeam Backup & Replication.

Answer: D

Veeam ONE watches the virtual setup before backups start. It can find problems like low datastore space early. It is not a requirement for installing VBR. Veeam ONE 13 ports

Q61 B16

Meeting a compliance list of automated recovery tests.

Answer: B

SureBackup starts backups in an isolated lab. It runs tests and can do a malware scan. It can email a report when done. SureBackup

Q62 B10

Why a restore point on S3 outlived its 31-day retention and immutability.

Answer: D

Hedged. VBR has no well-known 'retention exception' setting. A likelier cause: with object storage, immutability plus extra block-generation days can hold data longer than 60 days. Disabled jobs are now cleaned by background retention. D is the bank's choice, but the question is weak. v13: Since v12, background retention also cleans up points of disabled jobs, which removes option A. Hardened Repository

Q63 B11 Lab 1

The transport mode for an isolated proxy on vSAN.

Answer: D

Virtual appliance (hot-add) mode reads disks through the proxy VM itself. It does not use the host's VMkernel network. Network mode does use it. Direct SAN and Direct NFS do not work with vSAN. Transport Modes

Q64 B7

Keeping more than one copy of NAS share backups.

Answer: B

A NAS backup job can send a secondary copy to another repository. That gives a second copy of the file data. An archive repository is for long-term storage, not a true second copy. Unstructured Data

Q65 B9 Lab 4

Changing a backup copy job from periodic to immediate mode (second version).

Answer: C

Disputed key. The bank keys C; the documentation supports D. You cannot switch a backup copy job between immediate and periodic mode. The two modes work in different ways. You must make a new job with the new mode and remove the old one. Backup Copy

Q66 B4

What happens after more than five wrong MFA codes.

Answer: C

After five wrong MFA codes, Veeam locks the user out for one minute. Then the user can try again. It is not a long or permanent lock. Managing Configuration Database

Q67 O2 Lab 10

Where Veeam ONE shows VMware datastore capacity (first version).

Answer: A

In Veeam ONE Client, the Infrastructure View has a datastore list. Each datastore shows capacity and free space. Business View groups things by business use instead. Veeam ONE 13 ports

Q68 B9

Copying SQL VM backups and their 30-minute log backups offsite.

Answer: A

Disputed key. The bank keys A; the documentation supports D. Only immediate copy mode can copy SQL transaction log backups. Periodic copy mode copies only image backups and skips logs. To get the database and all logs to DR, use immediate mode. Backup Copy

Q69 B9

Replacing an old ReFS repository with a new Windows server.

Answer: A

Disputed key. The bank keys A; the documentation supports C. Copying files to new ReFS storage loses block clone sharing, so files grow. Veeam's Move backup feature keeps block clone savings and repoints the job. A backup copy job makes a new chain, not a move. Backup Copy

Q70 B20

Recovering a damaged physical Windows server onto vSphere quickly.

Answer: D

Instant VM Recovery can start an agent backup as a VM on vSphere in minutes. It runs straight from the backup. That gives the lowest restore time. Quick Rollback

Q71 B11

Remote-site backups slowing down as data grows over the WAN.

Answer: D

WAN accelerators remove repeat data before it crosses a slow link. Less data means faster copies on 20 Mbps. They need the right license edition. Transport Modes

Q72 B17

Letting developers restore their own files without IT.

Answer: C

Enterprise Manager has a self-service portal. Users can restore files from their own VMs. The backup team no longer handles each request. v13: Enterprise Manager still exists in v13 but is a Windows install; it is not part of the Linux-based Veeam Software Appliance. Veeam Backup Enterprise Manager

Q73 B19 Lab 6

What Secure Restore checks during a restore.

Answer: D

Secure Restore scans the restored data with antivirus before it goes back to production. If malware is found, you can stop or restore with the network off. Secure Restore

Q74 B1

Two apps that can't be down more than 4 hours while backups run nightly.

Answer: D

The option name is garbled but means CDP (continuous data protection). It keeps data loss to seconds. Failover to a replica is fast. Hourly replication could also meet a 1-hour RPO, so the question is loose. Backup Methods

Q75 B3

Two services a Veeam Cloud Service Provider offers.

Answer: A, E

Veeam Cloud Connect lets providers sell Backup as a Service and Disaster Recovery as a Service. The other options are not Veeam services. System Requirements

Q76 B4 Lab 3

The configuration restore mode for moving to new servers.

Answer: D

Configuration restore has two modes: Restore and Migrate. Migrate is for moving the VBR server and its database to new machines. Managing Configuration Database

Q77 B6

A protection group for one department's Windows servers.

Answer: A

A protection group can point at an Active Directory group. VBR rescans it on a schedule. New computers added to that group are picked up on their own. Protection Groups

Q78 B19

Recovering into AWS when local backups are gone and only Wasabi copies remain.

Answer: A

Disputed key. The bank keys A; the documentation supports D. Instant Recovery can run from capacity tier object storage like Wasabi, back to local vSphere. VBR has no 'instant' restore to EC2; that is a full restore. Wasabi has no VM compute. Restore from capacity tier

Q79 B5

Adding VMs with a custom application to a job automatically.

Answer: C

A backup job can select VMs by vSphere tag. Tag the VMs that have the app. New tagged VMs join the job on its next run. Application-Aware Processing

Q80 B20 Lab 6

When Quick Rollback can be used for a Linux VM on Hyper-V.

Answer: B

Quick rollback restores only changed blocks to the same VM in the same place. It suits software problems inside the guest, like a bad patch. It is not for hardware or storage faults or moves. Quick Rollback

Q81 B1

The feature with the lowest RPO.

Answer: B

CDP sends write changes almost in real time. Data loss is seconds. Snapshot replication and backups work in minutes or hours. Backup Methods

Q82 B20

Migrating a physical Windows file server with large volumes to ESXi.

Answer: D

Instant VM Recovery runs the agent backup as a VM on ESXi right away. Then you migrate it to production storage. This is fastest even with large disks. Quick Rollback

Q83 B16 Lab 9

The SureBackup feature that identifies dependent VMs for an on-demand lab.

Answer: A

An application group lists the VMs to start in the lab, and their boot order. The virtual lab is the isolated network they run in. SureBackup

Q84 B1

What a Recovery Point Objective is.

Answer: B

RPO is how much data you can lose, counted in time. For example, 1 hour of data. RTO is how long the restore may take. Backup Methods

Q85 B5

Protecting a 3-node SQL Always On cluster with 1-day and 15-minute RPOs.

Answer: A

A VM backup job with application-aware processing supports SQL Always On groups. Run it daily and set log backup every 15 minutes. That meets both RPOs. Application-Aware Processing

Q86 B10

Choosing tiers and modes for an immutable SOBR with an on-prem server.

Answer: D

Windows ReFS cannot be made immutable, so use a Linux hardened repository. The local server holds only 21 days, so use copy and move mode. S3 keeps the full 60 days with Object Lock. Hardened Repository

Q87 B9 Lab 4

The backup copy setting that keeps copies off a busy WAN during the day.

Answer: D

The backup copy window sets hours when the job may send data. Block business hours and copies run only after hours. Backup Copy

Q88 B9 Lab 4

Changing a backup copy job from periodic to immediate mode (third version).

Answer: A

Disputed key. The bank keys A; the documentation supports D. Same point as question 65. The copy mode is locked once the job exists. There is no setting to flip it. Make a new job and delete the old one. Backup Copy

Q89 B5

Recovering one SQL database consistently with the least production impact.

Answer: A

Turn on SQL transaction log backup every 30 minutes. Logs are small and light on production. Veeam Explorer for SQL can then restore to a point in time without SSMS. Application-Aware Processing

Q90 B12 Lab 8

The main benefit of replica mapping.

Answer: C

Replica mapping links the job to an existing VM at the DR site. Only changes are sent. So less data crosses the WAN. Replica Seeding and Mapping

Q91 B3

Two public clouds Veeam backs up without an agent.

Answer: A, E

Veeam Backup for AWS and Veeam Backup for Microsoft Azure protect cloud VMs with snapshots. No agent goes inside the VM. VirtualBox is not a cloud. System Requirements

Q92 B3

What a service provider can deploy from Service Provider Console v7.0 (second version).

Answer: B

Service Provider Console can push and manage Veeam Agents on client computers. It does not deploy Veeam ONE or Microsoft 365 backup. System Requirements

Q93 B14

Adding capacity in v12 when the only repository is a full FC-attached Windows server.

Answer: B

Capacity tier must be object storage, so StoreOnce is out. Windows cannot be a hardened repository. In v12, Google Cloud Storage did not support immutability, so S3 with Object Lock is the pick. v13: Current Veeam docs list Google Cloud as supporting capacity tier immutability, so D would also work in newer versions. Veeam documentation

Q94 B20 Lab 6

Ten VMs orphaned after an outage, with their disk files intact.

Answer: C

The disks are fine and current. Only the VM config files are lost. Restore VM files can bring back just the .vmx file. Then register the VM and no data is lost. Quick Rollback

Q95 B9

Copying hourly VMware backups offsite with long-term retention.

Answer: B

Periodic mode once a day gives one point per day. Keep 62 daily points for two months. Add 26 weekly GFS fulls for six months. This uses less space than 180 dailies. Backup Copy

Q96 O2

Diagnosing known configuration and performance issues without Veeam Support.

Answer: A

Veeam ONE Intelligent Diagnostics reads VBR logs. It matches them to known issues from Veeam support. It suggests fixes without a support case. Veeam ONE 13 ports

Q97 B6

Deploying Veeam Agents to Windows and Linux EC2 instances.

Answer: D

Cloud machines is the protection group type for AWS EC2 and Azure VMs. Veeam finds and reaches them through the cloud provider's API. So the distribution server does not need direct network access. Protection Groups

Q98 B7

What the NAS cache repository is for.

Answer: D

For file share backup, the cache repository holds temporary metadata. It tracks which files and folders changed. This makes the next incremental run faster. Unstructured Data

Q99 B6

A feature only Veeam Agent for Linux has.

Answer: C

Hedged. Backup from native snapshots (LVM or Btrfs snapshots) is a Linux agent feature. But PostgreSQL app-aware processing is also Linux-only, because the Windows agent does not support PostgreSQL. So option B is arguably correct too. The question is poorly written. Protection Groups

Q100 B21 Lab 7

Making a VM running from Instant Recovery permanent.

Answer: A

Instant VM Recovery runs the VM straight from the backup file. That is temporary. To finish, you move the VM to production storage with Migrate to production (Storage vMotion or Quick Migration). Failover Plans

Q101 B21 Lab 8

Failing interdependent VMs over one by one as a group.

Answer: D

A failover plan groups replicas. It fails them over one at a time in a set order. You can also set a delay between VMs. Failover Plans

Q102 B21 Lab 8

Starting VMs in order with delays during a disaster.

Answer: B

A failover plan lets you set the boot order of VMs. It also lets you set a delay between each VM start. Failover Plans

Q103 B11

Why a proxy picked a different transport mode than expected (exhibit lost).

Answer: C

The exhibit is lost. It probably showed Direct SAN access mode with no fallback to network mode. Direct SAN restore works only for thick disks. So a thin disk restore fails. CBT state does not stop a restore. Transport Modes

Q104 B4 Lab 3

The configuration restore mode for a corrupted configuration database.

Answer: B

Configuration restore has two modes: Restore and Migrate. Restore is for a damaged or lost database. Migrate is for moving the configuration to a new backup server. Managing Configuration Database

Q105 B9

Sending daily backups from Site B to the main site: job type and data path (exhibit lost).

Answer: A

Hedged. The component diagram is lost, so the numbers cannot be checked. A backup copy job is right. It reads existing backups, so the source VMs are not touched again. WAN accelerators help with the slow link. Backup Copy

Q106 B4

The component that takes a GDPR location tag (second version).

Answer: C

You can tag a location on infrastructure items that hold or produce data. These include backup repositories and scale-out repositories. Veeam then warns you if data would move to another location. Proxies, WAN accelerators and file copy jobs cannot take a location tag. Managing Configuration Database

Q107 B1

What is wrong with a coworker's new deployment from a list of notes.

Answer: C

Each job writes to only one place. There is no backup copy job. So each workload has just one backup copy. That fails the 3-2-1 rule. Backup Methods

Q108 B9

Sending backups from Site B to the main site: job type and data path (exhibit lost).

Answer: A

Hedged. The component diagram is lost, so the numbers cannot be checked. A backup copy job through WAN accelerators fits the slow link. Option A matches the twin question, but I cannot confirm the path. Backup Copy

Q109 B21 Lab 8

The actions available right after a planned failover finishes.

Answer: A

After a failover plan has run, you can undo it to go back to the source VMs. You can also start, edit or delete the plan. There is no Cancel or Copy action for a plan. Failover Plans

Q110 B11

Why each site should have a proxy for replication (first version).

Answer: E

For replication, Veeam needs a source proxy and a target proxy. A proxy at each site gives a stable data transfer between the sites. Snapshots and WAN acceleration do not depend on this. Transport Modes

Q111 B20

Recovering a damaged physical Windows server onto Hyper-V quickly.

Answer: A

Instant Recovery can start an agent backup as a Hyper-V VM directly from the backup file. That is the fastest way back online. Bare metal restore and export take much longer. Quick Rollback

Q112 B11

Slow backups after adding a Data Domain appliance.

Answer: C

A Data Domain needs a gateway server to talk to it. If no gateway is set, the backup server often takes that role. That adds load to the backup server. Transport Modes

Q113 B21 Lab 8

Booting database servers before application servers during failover.

Answer: A

A failover plan sets the order VMs start in. Put the database servers first. Then add a delay before the application servers start. Failover Plans

Q114 B15

Consolidating two companies' backups after a merger.

Answer: C

Since v12, you can move a machine's backups to another job. Veeam does this with no extra tools. Copying files by hand or with outside tools breaks the link to the job. Moving Backups

Q115 B9

Copying vSphere Windows and Hyper-V Linux backups offsite.

Answer: B

Only immediate copy mode copies transaction log backups. A backup copy job handles one platform type. VMware and Hyper-V backups therefore need two separate jobs. Backup Copy

Q116 B1

Making on-prem object storage backups conform to the 3-2-1 rule.

Answer: B

3-2-1 needs a second copy, on another media type, kept offsite. A backup copy job to public cloud object storage does all of this. Snapshots and same-building copies do not count as offsite. Backup Methods

Q117 B10 Lab 2

An on-prem-only SOBR whose data can't be deleted for 14 days.

Answer: A

Only A uses on-premises storage on both tiers. A hardened repository and S3-compatible object storage can both be immutable. Windows ReFS has no Veeam immutability. Amazon S3 is a public cloud, not on-premises. Hardened Repository

Q118 B21 Lab 8

Starting replicas at Site B before a planned power outage at Site A.

Answer: B

Planned failover runs one more sync of the replicas. Then it shuts down the source VMs and starts the replicas. This gives the least data loss before a known outage. Failover Plans

Q119 B10

Meeting 3-2-1 plus 31 days of undeletable backups (second version).

Answer: D, E

The NAS repository cannot be made immutable by Veeam. Moving the backups to a hardened repository fixes the local copy. Turning on immutability for the S3 copy protects the offsite copy and its monthly GFS points. v13: Note: S3 Object Lock usually has to be enabled when the bucket is created. Hardened Repository

Q120 B14 Lab 5

A backup that moves data to different media after a set time.

Answer: D

The Move option in a capacity tier moves older backups to object storage after a set number of days. Object storage is a different media type and can be offsite. No extra job is needed. Scale-Out Backup Repositories

Q121 B7

The component unstructured data backup needs.

Answer: A

File share and object storage backup needs a general-purpose backup proxy. It reads the source data and sends it to the repository. Unstructured Data

Q122 B10 Lab 2

What raising the immutability period on a repository changes.

Answer: A

On a hardened repository, Veeam keeps extending the lock on the active chain. When you raise the period, the new value is used for the active chain and new chains on the next run. Hardened Repository

Q123 B6

Protecting a whole physical Windows server running SQL.

Answer: B

A physical server needs Veeam Agent to back up the whole machine. The agent can also do application-aware processing for SQL Server. Protection Groups

Q124 B4

The component that takes a data-sovereignty location tag (third version).

Answer: C

Same as question 106. Locations can be set on repositories and scale-out repositories. Proxies, WAN accelerators and file copy jobs cannot take a location. Managing Configuration Database

Q125 B6

Which target a standalone Veeam Agent for Windows can't write to.

Answer: A

Veeam Agent for Windows can write recovery media to removable storage, an optical disc, or an ISO file. It cannot write recovery media to object storage, a Veeam repository, or tape. Protection Groups

Q126 B9

Copying Site A backups offsite with long retention.

Answer: A

62 days of daily points covers any day in the last two months. 26 weekly GFS points covers about six months. Six monthly points would not allow a restore from any week. Backup Copy

Q127 B14

Using S3-compatible storage at the secondary site for longer retention.

Answer: D

Backups must be kept for 30 days, so the job retention must be 30 days. A capacity tier in Move mode set to 14 days sends older backups to S3. Weekly fulls close each chain, so it can be moved. Scale-Out Backup Repositories

Q128 B20 Lab 6

Restoring a corrupted file on a VMware Windows VM with VMware Tools.

Answer: B

When the mount server cannot reach the VM over the network, Veeam can use VMware Tools. It copies the file through the vSphere API (VIX). This is fast and needs no Instant Recovery. Quick Rollback

Q129 B21 Lab 7

Making an Instant Recovery VM permanent (second version).

Answer: B

Same as question 100. Instant Recovery runs the VM from the backup. You finish by moving it to production storage with Migrate to production. Failover Plans

Q130 B11

What happens to a server when its proxy role is removed.

Answer: A

Removing the proxy role only removes that role. The server stays in the managed servers list. You must remove it there separately. Transport Modes

Q131 B14

Where the archiver appliance runs for an Azure archive tier.

Answer: C

For an Azure archive tier, Veeam deploys a temporary helper VM in Azure. It packs and moves data between the capacity and archive tiers. It runs only during archiving. Scale-Out Backup Repositories

Q132 B3

Copying backups to a service provider without a VPN.

Answer: D

Cloud Connect sends backups to a service provider over a single secure TLS port. No VPN is needed. System Requirements

Q133 B1

The part of 3-2-1-1-0 still missing after adding an offsite copy.

Answer: D

In 3-2-1-1-0, the 0 means zero errors after automated restore testing, such as SureBackup. The company already has the offsite immutable copy. Testing is what is missing. Backup Methods

Q134 B16 Lab 9

A SureBackup job that only scans backups for malware.

Answer: D

Backup verification and content scan mode checks the backup file and scans it for malware. It does not start VMs in a virtual lab. So it is faster than full recoverability testing. SureBackup

Q135 B3

The feature that lets VCSPs offer backup and replication services.

Answer: B

Cloud Connect lets service providers offer cloud backup and replication to their customers. The other names are not Veeam features for this. System Requirements

Q136 B10

Fixing slow, insecure fulls on an NFS NAS repository.

Answer: B

A hardened repository adds immutability for security. XFS with Fast Clone builds synthetic fulls by referencing existing blocks. So each full uses very little extra space and is fast. Hardened Repository

Q137 B17

What Enterprise Manager can restore.

Answer: C

Enterprise Manager can restore PostgreSQL instances. AD accounts, Teams chats and SharePoint Online items are not restored from Enterprise Manager. Enterprise Manager: restore PostgreSQL

Q138 B20

Bringing a bare-metal Red Hat server back after total failure.

Answer: B

To restore a whole physical Linux server, boot it from Veeam Recovery Media. Then run a bare metal restore from the backup. Quick Rollback

Q139 B19

Restoring a database server without its sensitive data.

Answer: C

Staged Restore starts the machine in a virtual lab first. A script removes the sensitive data there. Then the clean machine is restored to production. Secure Restore

Q140 B20

Which of four VM problems a Full VM Restore can fix.

Answer: D

Quick Rollback restores only changed blocks. It works only for problems inside the guest OS, such as a failed update. It is not for storage, host, or hardware problems. Quick Rollback

Q141 B3

Replicating VMs to a service provider without VPNs.

Answer: B

Cloud Connect replication sends VMs to a service provider over a secure TLS link. It needs no VPN. System Requirements

Q142 B14

Adding capacity in v12.1 when the only repository is a full FC-attached Windows server.

Answer: A

An immutable S3 bucket as the capacity tier gives an offsite immutable copy on different media. In v12, Windows repositories cannot be immutable. An SMB share cannot be immutable either. Scale-Out Backup Repositories

Q143 B27

Preparing the backup server for a merger that adds workloads.

Answer: D

One backup server will manage more jobs and tasks. So you must check that its CPU and RAM still meet sizing needs for the extra load. Backup Server system requirements

Q144 B11

Why installing on Windows 2008 R2 fails.

Answer: C

Windows Server 2008 R2 is not supported for a VBR v12 backup server. 8 CPUs and 16 GB RAM are enough. A firewall would not block the install itself. v13: v13 can also be deployed as the Linux-based Veeam Software Appliance. Old Windows versions are still not supported. Transport Modes

Q145 B11

A large, I/O-heavy VM suffers during backup snapshots.

Answer: C

The stun happens when a big VMware snapshot is merged. Backup from Storage Snapshots keeps the VM snapshot open only for seconds. So the merge is small and the stun goes away. Transport Modes

Q146 O1

A list of all VMs that are not protected.

Answer: D

Veeam ONE watches both vCenter and the backup server. Its Protected VMs report lists VMs that have no backup. That is what management asked for. Veeam ONE 13 ports

Q147 O1

Reports of which servers are and are not backed up.

Answer: C

Veeam ONE is the reporting tool. Its reports show which machines backed up fine and which failed or were missed. Veeam ONE 13 ports

Q148 B21 Lab 8

Going back to production after failover, discarding DR-side changes.

Answer: C

Undo failover powers off the replica and goes back to the original VM. Any changes made on the replica are thrown away. Failback would keep those changes. Failover Plans

Q149 O4

Justifying (or rejecting) a hardware purchase request with data.

Answer: C

Hedged. Deployment Projects model future resource needs, like adding hosts or VMs, in charts. That fits a hardware request. But Jobs Calendar shows when backups run, which fits the off hours part. The question is vague. Veeam ONE deployment projects

Q150 B9

Reusing old backups as a seed after a site swap.

Answer: C

Backup copy mapping points the job at the old backup chain on the target. Veeam then only sends the changes. That makes the first copy much faster than a full copy. Backup Copy

Q151 B8

Tuning jobs when object storage replaces block storage.

Answer: A

Object storage holds one object per data block. Bigger blocks (4 MB) mean fewer objects. That is the vendor's goal. Backup Methods

Q152 B5

Two ways to back up SQL to Veeam with Microsoft's native tools.

Answer: A, D

The SQL plug-in lets DBAs use native SQL tools (SSMS, T-SQL) to send backups to a Veeam repo. App-aware processing uses the SQL VSS writer. The other options are not real products or do not back up SQL. Veeam Plug-in for Microsoft SQL

Q153 B10

Choosing tiers and modes for an immutable SOBR (second version).

Answer: B

Copy mode sends every backup to AWS. Move mode frees local space after 21 days. A hardened Linux repo on XFS gives local immutability. Windows ReFS repos cannot be immutable. Hardened Repository

Q154 B14

The lowest-cost storage tier on Azure in a SOBR.

Answer: A

The cheapest Azure Blob tier is the Archive tier. Veeam needs a short-lived archiver appliance VM in Azure to move data into that tier. Scale-Out Backup Repositories

Q155 B15

Moving backups from a ReFS server to a new hardened repository.

Answer: B

The Move backup option moves the backup files and repoints the job in one step. Changing the job target alone would start a new full backup. Evacuate is for SOBR extents only. Moving Backups

Q156 B7

What NAS backup supports in v12.1.

Answer: A

VBR 12.1 backs up file shares, including NFS shares. It does not back up ESXi hosts, HP-UX, or AS/400 systems. Unstructured Data

Q157 B11

Installing on a physical server that has no mouse.

Answer: A

VBR supports an unattended (silent) install from the command line. You can type it with just the keyboard. The VBR ISO is not a bootable installer. v13: v13 adds the Veeam Software Appliance, a bootable ISO, but the Windows install still uses a silent command-line install. Transport Modes

Q158 B4 Lab 3

Rolling back the configuration after replica jobs went missing.

Answer: C

Use Configuration Restore with a configuration backup file. It rolls the config database back to the saved state, so the missing replica jobs come back. Managing Configuration Database

Q159 B12

A recovery option CDP replicas offer.

Answer: A

CDP keeps short-term restore points every few seconds. You can roll a replica back to a point seconds or minutes ago. Replica Seeding and Mapping

Q160 B12

Protecting tenant VMs where no data loss is acceptable.

Answer: D

CDP replicates I/O almost in real time. RPO can be a few seconds. That suits VMs where almost no data loss is allowed. Replica Seeding and Mapping

Q161 B3

What Cloud Connect provides when linking to a provider.

Answer: A

Cloud Connect gives a secure TLS link to the provider over the internet. It uses one port and needs no VPN. System Requirements

Q162 B1

Naming the 15-minute limit on lost transactions.

Answer: C

RPO is how much data you can lose, measured in time. Losing no more than 15 minutes of transactions is an RPO. Backup Methods

Q163 B1

The correct meaning of RPO.

Answer: B

RPO means Recovery Point Objective. It is the amount of time in which data loss is accepted. Backup Methods

Q164 B19

Which Oracle failure Veeam Explorer can fix.

Answer: B

Enterprise Manager can restore Oracle databases from image backups made with application-aware processing. It cannot restore RMAN plug-in backups. Secure Restore

Q165 B10 Lab 2

Why immutable points outlive retention on an XFS hardened repository.

Answer: C

Fast clone works on XFS. But immutable files cannot be deleted until the lock ends. If the lock period is long, old chains stay on disk, so storage grows. Hardened Repository

Q166 B22

Notifying security whenever malware is found in backups.

Answer: C

In 12.1 the Malware Detection settings have a Notifications tab. Put the security team's email there to alert them. Malware detection notifications (v12 docs)

Q167 B7

Placing NAS backup data in a SOBR with SSD and dedup extents.

Answer: B

NAS metadata is read and written often, so put it on fast SSD. Bulk data goes to the dedupe appliance to save space. Unstructured Data

Q168 B11

Why each site should have a proxy for replication (second version).

Answer: D

With a proxy at each site, the source proxy compresses data. The target proxy unpacks it. So less data crosses the slow WAN link. Transport Modes

Q169 B11

Redesigning the configuration database so crashes stop costing jobs.

Answer: A

SQL Always On groups keep the config database running if one SQL node fails. The configuration backup tool is the supported way to protect it. App-aware backup of the database is not the way to restore it. v13: v13 defaults to PostgreSQL; check v13 docs for its high-availability options. Transport Modes

Q170 O1

Two data sources Veeam ONE connects to.

Answer: B, C

Veeam ONE connects to vCenter or ESXi, Hyper-V hosts, and VBR servers. Agents are seen through VBR. Cloud VMs are not direct sources. Veeam ONE 13 ports

Q171 B5

Protecting irregularly created templated VMs by tag.

Answer: C

Tags pick up new VMs on their own when they get the tag. Disk settings let you leave out the scratch disk. Application-Aware Processing

Q172 B16 Lab 9

SureBackup ping tests fail on Windows VMs that boot fine.

Answer: D

The VM boots but ping fails. Windows Firewall blocks the ping (ICMP). SureBackup can turn off the firewall for you during the test. SureBackup

Q173 B4

Which role manages MFA for other users.

Answer: B

In v12 only a Veeam Backup Administrator manages users, roles, and MFA settings. v13: v13 adds a Security Administrator role and four-eyes approval for MFA changes. Managing Configuration Database

Q174 B17

Granular restore permissions for the Restore Operator role (second version).

Answer: D

In Enterprise Manager a Restore Operator can be limited to certain restore types. One type is database restore (SQL and Oracle). Veeam Backup Enterprise Manager

Q175 B1

What saved the day after losing the primary data centre.

Answer: B

Backup copy jobs put a second copy of data in another place. That copy survives when the main site is lost. Backup Methods

Q176 B20

Two ways to restore a single Linux file to the same server.

Answer: B, D

For Linux file restore to the original server, Veeam mounts disks on a helper host, or on a temporary helper appliance. A mount server is for Windows. Quick Rollback

Q177 B1

A DR strategy for a newly acquired company.

Answer: A

CDP replication sends data to a DR site with a very low RPO. That meets the DR needs. The other options miss RPO, RTO, or are not DR to another site. Backup Methods

Q178 B5

Why a new SQL database's backup was not consistent.

Answer: C

Point-in-time SQL restore needs log backups. Turn on app-aware processing and set SQL log backups to the needed interval. Application-Aware Processing

Q179 B9

Copying Site A backups offsite with long retention (pruning version).

Answer: C

62 daily points cover two months. 26 weekly GFS points cover six months. Periodic mode copies only the latest point per run, so it uses less space. Backup Copy

Q180 B19

Three targets for Instant Recovery of a VMware VM.

Answer: C, E, F

Disputed key. The bank keys CEF; the documentation supports ACF. In v12, a VMware backup can be instantly recovered to vSphere, Hyper-V, or Nutanix AHV. Instant Recovery to Azure did not exist in v12. Azure had only direct restore. v13: v13 adds Instant Recovery to Microsoft Azure, so E is also valid in v13. Veeam documentation

Q181 B17

What SAML for Enterprise Manager needs.

Answer: A, B, C

Disputed key. The bank keys ABC; the documentation supports AB. SAML needs an identity provider set up and a user or group added in Enterprise Manager. Any SAML 2.0 provider works. Entra ID admin rights are not required. Veeam Backup Enterprise Manager

Q182 B1

Two critical apps that can't lose more than four hours (second version).

Answer: D

Hourly replication gives about one hour of data loss. Starting a replica is fast, well under four hours. Backup Methods

Q183 B6

Agents already installed on EC2 and Azure servers: which protection group.

Answer: A

A cloud machines protection group finds AWS and Azure machines through the cloud API. It adds or removes them on its own. Protection Groups

Q184 B14

Retention plus capacity and archive tiers to meet a GFS policy.

Answer: D

Disputed key. The bank keys D; the documentation supports A. Copy mode puts every point in S3. Move mode after 14 days frees local disk. Archive tier only moves GFS points from the capacity tier, so local disk would still hold 30 days. Scale-Out Backup Repositories

Q185 B16

Finding credit card numbers in backups during SureBackup.

Answer: C

Disputed key. The bank keys C; the documentation supports B. YARA rules match text patterns, so they can find data like credit card numbers. Security & Compliance Analyzer only checks Veeam's own settings. Veeam documentation

Q186 B11

Backing up VMs in Data Center B from a backup server in A.

Answer: A

Proxies in Data Center B sit next to the VMs and the repository. Data never crosses the slow link. Transport Modes

Q187 B11

Why installing with a SQL 2008 database server fails.

Answer: A

VBR 12 does not support SQL Server 2008. It needs a newer SQL version or PostgreSQL. Windows 2019 is fine. v13: v13 uses PostgreSQL by default; check v13 system requirements for supported SQL versions. Transport Modes

Q188 O2 Lab 10

Where Veeam ONE shows VMware datastore capacity (second version).

Answer: B

In Veeam ONE, Infrastructure View shows datastores with their capacity and free space. Veeam ONE 13 ports

Q189 O3

A quarterly capacity report for a director.

Answer: C

Veeam ONE Web Client runs capacity planning reports. You can schedule them, for example each quarter. Veeam ONE 13 ports

Q190 B3

A valid service from a Veeam Cloud Service Provider.

Answer: D

A VCSP can host replicas through Cloud Connect. The provider gives compute and storage (hardware plans) to run them. System Requirements

Q191 B5

The component that does file indexing for a vSphere Windows VM.

Answer: A

The guest interaction proxy deploys the runtime inside the Windows VM. The runtime does indexing and other guest tasks. Application-Aware Processing

Q192 B1

The definition of RTO.

Answer: D

RTO is the longest time a system can be down after a failure. Backup Methods

Q193 B1

A company can lose at most 15 minutes of data on its ERP database, and the database must be running again within 30 minutes. Which value is the RPO?

Answer: B

RPO is the maximum acceptable data loss (15 minutes). The 30 minutes is the RTO. Backup Methods

Q194 B11 Lab 1

A proxy is a physical Windows server with FC access to the VMFS LUNs. Which transport mode will it use first in automatic mode?

Answer: C

Automatic mode prefers Direct storage access first. A physical server can never use Virtual appliance (HotAdd). Transport Modes

Q195 B11 Lab 1

Which port must be open from a proxy to ESXi hosts for Network (NBD) transport mode?

Answer: B

NBD/NFC traffic uses TCP 902 on the ESXi host. Transport Modes

Q196 B11

Which port does the Veeam Data Mover Service listen on?

Answer: B

6162 is the Data Mover (Transport) Service. 6160 is the Installer Service. Transport Modes

Q197 B11

In VBR v13, which port does the backup console use to connect to the backup server?

Answer: C

v13 moved console and web UI traffic to 443. 9392 was the v12 console port. 10443 is appliance Host Management. Transport Modes

Q198 B1

Which part of the 3-2-1-1-0 rule does SureBackup satisfy?

Answer: C

The final 0 means zero errors after recovery verification, which is what SureBackup automates. Backup Methods

Q199 B11 Lab 1

A proxy VM is configured for Virtual appliance mode but cannot see the datastore of one VM. With default settings, what happens?

Answer: B

'Failover to network mode if primary mode fails' is on by default. Transport Modes

Q200 B10 Lab 2

What is the minimum immutability period you can set on a hardened repository?

Answer: C

7 to 9999 days. Hardened Repository

Q201 B10 Lab 2

Which backup method can you use with a hardened repository?

Answer: C

Reverse incremental and forever forward incremental both rewrite the full backup file, so they cannot work with immutable files. Hardened Repository

Q202 B10 Lab 2

Why are single-use credentials used when adding a hardened repository?

Answer: B

Used once to deploy the Data Mover, then discarded. A compromised backup server cannot reach the repository with them. Hardened Repository

Q203 B14 Lab 5

A SOBR capacity tier uses the move policy, but no data ever moves to object storage. The job is forever forward incremental. Why?

Answer: B

Forever forward incremental keeps one active chain that never seals, so there is nothing eligible to move. Scale-Out Backup Repositories

Q204 B14 Lab 5

Which SOBR placement policy stores full and incremental files of a chain on the same extent?

Answer: B

Data locality keeps a chain together. Performance splits fulls and increments across extents. Scale-Out Backup Repositories

Q205 B4 Lab 3

A configuration backup is restored on a new server, but every stored password is missing. What was most likely not done?

Answer: A

Credentials are included only in encrypted configuration backups. Managing Configuration Database

Q206 B11

Which v13 feature lets two backup servers run as an active/passive pair?

Answer: B

HA requires the VSA (13.0.1+) and the Veeam Data Platform Premium edition. Transport Modes

Q207 B11

Which component must exist at both sites to use WAN acceleration?

Answer: C

WAN acceleration needs a source and a target WAN accelerator. Transport Modes

Q208 B8

Which backup method creates 3x I/O on the repository for every changed block during the backup?

Answer: B

Reverse incremental reads the old block, writes it to the .vrb, and writes the new block into the .vbk. Backup Methods

Q209 B8

The customer wants the most recent restore point to always be a full backup file. Which method fits?

Answer: C

Only reverse incremental keeps the .vbk as the newest point. Backup Methods

Q210 B8

Which operation creates a new full backup without reading from the production VM?

Answer: B

A synthetic full is built from restore points already on the repository. Backup Methods

Q211 B12

What is the minimum RPO you can set in a CDP policy?

Answer: B

Minimum 2 seconds. Veeam recommends 15 seconds or more. Maximum 60 minutes. Replica Seeding and Mapping

Q212 B9 Lab 4

Where does a backup copy job read its data from?

Answer: C

Backup copy jobs read restore points from backup files, never from production. Backup Copy

Q213 B21 Lab 8

You fail over to a replica to test it, then want to go back with no changes kept. Which operation?

Answer: C

Undo failover powers off the replica and discards changes made during failover. Failover Plans

Q214 B5

Without application-aware processing, what kind of backup does a running SQL Server VM get?

Answer: B

Without VSS quiescing, the image is crash-consistent. Application-Aware Processing

Q215 B7

In NAS backup, what does the cache repository store?

Answer: B

It keeps metadata so later runs find changed files fast. Unstructured Data

Q216 B12

Which vSphere feature does Veeam CDP use to capture writes?

Answer: C

The Veeam I/O filter is installed through VAIO on the clusters. Replica Seeding and Mapping

Q217 B6

A laptop fleet should back itself up whenever the laptops are online. What should you create?

Answer: B

Backup policies are agent-managed and suit machines that are not always reachable. Protection Groups

Q218 B20 Lab 6

A VM got a bad Windows update. Its disks are fine. What is the fastest way to restore the whole VM to its original location?

Answer: B

Quick rollback restores only the changed blocks, using CBT. Quick Rollback

Q219 B21 Lab 7

Which component publishes the backup to ESXi as a datastore during Instant Recovery?

Answer: C

vPower NFS runs on the mount server. Failover Plans

Q220 B21 Lab 7

An Instant Recovery session should become the permanent production VM. What do you do?

Answer: B

Migration (Storage vMotion or Quick Migration) moves the VM onto production storage. Failover Plans

Q221 B5

A user deleted a table at 14:37. You need the database as it was at 14:36. What must have been enabled?

Answer: B

Point-in-time restore needs SQL log backups. Application-Aware Processing

Q222 B16 Lab 9

In a SureBackup job, why put the domain controller in an application group?

Answer: B

Application groups start dependency VMs first and in order. SureBackup

Q223 B16 Lab 9

How do you reach VMs inside a virtual lab from production?

Answer: B

The proxy appliance maps masquerade IPs to the isolated lab VMs. SureBackup

Q224 B19 Lab 6

Which feature scans a backup with antivirus before it is restored?

Answer: A

Secure restore scans the mounted disks first. Secure Restore

Q225 O1 Lab 10

Which port do you open in the browser to reach the Veeam ONE Web Client by default?

Answer: B

1239 is the default website port. Veeam ONE 13 ports

Q226 O1 Lab 10

Which component, new in Veeam ONE 13, collects data from backup servers?

Answer: B

Veeam Analytics Service is the evolution of the Veeam ONE Agent and uses port 2805. Veeam ONE 13 ports

Q227 O4

Management wants to know how many days remain until a backup repository is full. Which Veeam ONE feature answers this?

Answer: B

Capacity planning projects growth trends to a full date. Veeam ONE deployment projects

Q228 O2 Lab 10

Increment sizes for one job jump to 10x normal overnight. Which alarm is designed for this?

Answer: B

It flags abnormal increment growth, a common sign of encryption. Veeam ONE 13 ports

Q229 O3 Lab 10

You want alarms and reports grouped by department rather than by cluster. What do you configure?

Answer: B

Business View categorizes objects into business groups. Veeam ONE 13 ports

Q230 O2 Lab 10

An alarm should restart a stuck service only after an admin approves it. Which feature?

Answer: B

Remediation actions can run automatically or after approval. Veeam ONE 13 ports

Q231 R2

Which VRO plan type recovers VMs from Veeam backups into vSphere?

Answer: B

Restore plans use backup or backup copy jobs and a recovery location. Recovery Orchestrator onboarding: orchestration plans

Q232 R3

What must exist in VBR before you can create a DataLab in VRO?

Answer: B

A DataLab is a one-to-one overlay of a VBR virtual lab. Recovery Orchestrator onboarding: testing and reports

Q233 R3

Which check quickly confirms a plan matches the DR environment and meets its RPO, without starting VMs?

Answer: B

The readiness check is fast and low-impact. No VMs are started. Recovery Orchestrator onboarding: testing and reports

Q234 R2

Which language do custom plan steps use?

Answer: C

Custom steps are PowerShell scripts. Recovery Orchestrator onboarding: orchestration plans

Q235 R4

An auditor asks for proof that DR was tested last quarter. Which report?

Answer: B

DataLab Test reports record each test run and its results. Recovery Orchestrator onboarding: testing and reports

Q236 R4

A replica plan ran. Production is healthy again and you want to switch back, keeping changes made on the replicas. What is the next step?

Answer: B

Failback syncs changes to production. Commit it once production is confirmed. Recovery Orchestrator onboarding: testing and reports

Dictionary — the words behind the answers

Every term below is marked in the text above with a dotted underline. Click one anywhere on the page and its definition opens in place, so you never lose your spot. Each entry gives the one-line meaning first and then how it actually works.

These definitions are written from the behaviour the question bank tests and the Veeam documentation linked on each entry. Where a number or a default matters, check it against your v13 build.

RPO

How much data you can afford to lose, measured in time.

Looks backwards from the disaster. Backups give hours, replication minutes, CDP seconds.

See also: RTO · CDP

Veeam documentation →

RTO

How long a workload can be down after a failure.

Looks forwards from the disaster. Instant Recovery and replica failover give the shortest.

See also: RPO · Instant Recovery

Veeam documentation →

3-2-1-1-0

Three copies, two media, one offsite, one offline or immutable, zero errors.

The offsite copy is usually a backup copy job; the zero is SureBackup.

See also: Backup copy job · SureBackup

Veeam documentation →

Backup proxy

The component that reads VM data and sends it to the repository.

Picks a transport mode per disk. Add more proxies when the proxy is the bottleneck.

See also: Transport modes · Guest interaction proxy

Veeam documentation →

Transport modes

How a VMware proxy reads disks: Direct storage, Virtual appliance (HotAdd) or Network (NBD).

Automatic mode tries them in that order and fails over to network by default. NBDSSL encrypts the network path.

See also: Backup proxy

Veeam documentation →

Gateway server

The server that talks to a repository that can't run a data mover.

SMB shares and deduplicating appliances need one. If none is chosen, the backup server takes the role.

See also: Backup proxy

Veeam documentation →

Mount server

Mounts backups for restores and publishes them over vPower NFS for Instant Recovery.

During Instant Recovery, ESXi sees a datastore served by the mount server.

See also: Instant Recovery

Veeam documentation →

WAN accelerator

A pair of servers that remove repeated data before it crosses a slow link.

One at the source, one at the target, with a global cache on the target.

See also: Backup copy job

Veeam documentation →

Guest interaction proxy

Deploys the runtime into the guest for application-aware processing and indexing.

Used when the backup server can't reach the guest itself.

See also: Application-aware processing

Veeam documentation →

Hardened repository

A Linux XFS repository whose backups can't be changed or deleted until their lock expires.

Immutability of 7 to 9999 days. Added with single-use credentials that are never stored.

See also: Immutability · Fast clone

Veeam documentation →

Immutability

A lock that stops backup files being changed or deleted until a date.

On a hardened repository it's the Linux immutable flag; on object storage, Object Lock.

See also: Hardened repository

Veeam documentation →

Fast clone

ReFS block cloning or XFS reflink, turning synthetic fulls and merges into metadata operations.

Synthetic fulls become quick and take almost no extra space.

See also: Synthetic full

Veeam documentation →

Scale-out Backup Repository

One logical repository built from performance, capacity and archive tiers.

Capacity tier copy or move policies send data to object storage; archive tier takes GFS points.

See also: Capacity tier · Archive tier

Veeam documentation →

Capacity tier

The object-storage tier of a SOBR.

Copy sends each new backup at once; Move relocates sealed chains older than N days.

See also: Scale-out Backup Repository · Archive tier

Veeam documentation →

Archive tier

The cheapest SOBR tier, for GFS points in Glacier or Azure Archive.

Azure archiving runs a temporary archiver appliance VM in Azure.

See also: Capacity tier

Veeam documentation →

Data locality

A SOBR placement policy keeping a whole chain on one extent.

The alternative, Performance, splits fulls and increments across extents.

See also: Scale-out Backup Repository

Veeam documentation →

Backup copy job

A job that copies existing backup files to a second repository.

Immediate mode copies every point, including logs; periodic copies the latest per interval. The mode can't be changed later.

See also: 3-2-1-1-0

Veeam documentation →

GFS retention

Grandfather-father-son: weekly, monthly and yearly full points kept beyond short-term retention.

GFS points have their own retention and, on immutable storage, their own lock.

See also: Backup copy job

Veeam documentation →

Synthetic full

A full backup built from points already on the repository.

No production read; with fast clone it costs almost nothing.

See also: Fast clone · Reverse incremental

Veeam documentation →

Reverse incremental

The method where the .vbk is always the newest point and old blocks go to .vrb files.

3 I/O per changed block; deprecated in v13; can't be used on immutable repositories.

See also: Synthetic full

Veeam documentation →

Application-aware processing

VSS-based quiescing that makes application-consistent backups.

Also enables SQL transaction log and Oracle archive log backup.

See also: Guest interaction proxy

Veeam documentation →

Replica

A ready-to-run copy of a VM on a DR host, updated by a replication job.

Seeding or mapping cuts the first run's WAN traffic.

See also: Failover plan · Failback

Veeam documentation →

CDP

Replication of every write, for RPOs in seconds.

Uses the Veeam I/O filter through VAIO; minimum RPO 2 seconds.

See also: Replica · RPO

Veeam documentation →

Failover plan

A group of replicas started in a set order with delays.

Built before a disaster. Afterwards it offers Undo, Start, Edit and Delete.

See also: Replica

Veeam documentation →

Failback

Returning from a replica to production, keeping changes made at DR.

Undo failover discards them instead. Planned failover syncs before switching.

See also: Failover plan

Veeam documentation →

Instant Recovery

Running a VM straight from its backup in minutes.

vPower NFS on the mount server publishes the backup; Migrate to production makes it permanent.

See also: Mount server

Veeam documentation →

Quick rollback

An entire VM restore that writes back only changed blocks.

For problems inside the guest, not hardware or storage faults.

See also: Instant Recovery

Veeam documentation →

Staged restore

Restore that runs a script on the machine in a virtual lab first.

Used to delete personal data before the machine reaches production.

See also: Virtual lab

Veeam documentation →

Secure restore

An antivirus scan of the backup before it is restored.

If malware is found you can abort or restore with the network disconnected.

See also: Staged restore

Veeam documentation →

SureBackup

Automated recovery verification of backups in an isolated lab.

Boots VMs, runs heartbeat, ping and application tests, and can scan for malware.

See also: Virtual lab · Application group

Veeam documentation →

Virtual lab

An isolated network where SureBackup and staged restore run VMs.

Production reaches it through masquerade IPs on the proxy appliance.

See also: SureBackup

Veeam documentation →

Application group

The VMs a SureBackup job starts first, in order, such as the domain controller.

Not used for real failover; that's a failover plan.

See also: SureBackup · Failover plan

Veeam documentation →

Enterprise Manager

A web console over many backup servers.

Central licensing, roles, self-service file restore, and application item restore.

Veeam documentation →

Cloud Connect

Sending backups and replicas to a service provider over one TLS port.

No VPN needed. The basis of BaaS and DRaaS offers.

Veeam documentation →

Veeam ONE

Monitoring, alarms and reporting across virtual and backup infrastructure.

Infrastructure View for hypervisors, Data Protection View for backup, Business View for business groups.

Veeam documentation →

Recovery Orchestrator

Automated, tested DR plans on top of Backup & Replication.

Plans are replica, restore, CDP or storage plans; DataLabs overlay VBR virtual labs.

See also: Virtual lab

Veeam documentation →