Built by mapping the three courses VMCE+ requires, VBR v13: Configure, Manage and Recover, Veeam ONE and Recovery Orchestrator, against a 236-question VMCE practice bank. Organised by what actually gets tested, not by course order.
This page decides what to study. ToastVault holds the notes for every exam topic, and every module below links straight to them. Blueprint cross-reference → · BreadLab labs → · Flashcards → · Dictionary →
Every one of the 236 practice questions was tagged to the course module that teaches it, and separately to the ToastVault topic it tests. The counts below are the result. The VBR modules are the course’s published 27-topic agenda, in order. Veeam doesn’t publish module titles for the Veeam ONE and Recovery Orchestrator courses, so those are grouped by topic from learners’ write-ups of the modules.
Four structural facts about this bank:
The real exam is 100 questions in 150 minutes, scored out of 1000 with 724 to pass. The timed practice exam below uses the same length and clock.
| Module | Course | Qs | Share | Verdict |
|---|---|---|---|---|
| B11 Backup Infrastructure Optimization | VBR v13: Configure, Manage and Recover | 27 | 11% | Heaviest module: which component, mode or port |
| B9 Backup Copy Jobs | VBR v13: Configure, Manage and Recover | 17 | 7% | Copy modes, retention maths, five disputed keys |
| B1 Data Protection Strategies | VBR v13: Configure, Manage and Recover | 16 | 7% | Definitions you can bank |
| B20 Selecting the Ideal Recovery Method | VBR v13: Configure, Manage and Recover | 15 | 6% | Which restore fits the failure |
| B21 Enacting a Recovery | VBR v13: Configure, Manage and Recover | 15 | 6% | Failover plans, five times over |
| B10 Immutability and Hardened Repositories | VBR v13: Configure, Manage and Recover | 14 | 6% | Design the immutable setup |
| B5 Protecting Workloads | VBR v13: Configure, Manage and Recover | 14 | 6% | AAP and SQL logs |
| B14 Scale-out Backup Repository | VBR v13: Configure, Manage and Recover | 13 | 6% | Copy vs move, sealed chains |
| B3 What is Protected? | VBR v13: Configure, Manage and Recover | 11 | 5% | Cloud Connect, asked five ways |
| B19 Advanced Recovery Features | VBR v13: Configure, Manage and Recover | 10 | 4% | Secure, staged, instant disk |
| B4 Security and Protection Considerations | VBR v13: Configure, Manage and Recover | 10 | 4% | Config restore modes, MFA, locations |
| B6 Deploying Agents | VBR v13: Configure, Manage and Recover | 10 | 4% | Which protection group |
| B16 Recovery Verification | VBR v13: Configure, Manage and Recover | 9 | 4% | Name the SureBackup part |
| B7 Unstructured Data Backup | VBR v13: Configure, Manage and Recover | 8 | 3% | Pieces of a file share backup |
| B17 Veeam Backup Enterprise Manager | VBR v13: Configure, Manage and Recover | 7 | 3% | One capability each |
| B12 Replication | VBR v13: Configure, Manage and Recover | 6 | 3% | Seeding and CDP basics |
| O1 Deploying and Connecting Veeam ONE | VDP: Monitor, Manage, Analyze (Veeam ONE) | 6 | 3% | Which product answers this |
| O2 Monitoring, Alarms and Remediation | VDP: Monitor, Manage, Analyze (Veeam ONE) | 6 | 3% | Which view, which alarm |
| B8 Optimizing Your Backups | VBR v13: Configure, Manage and Recover | 4 | 2% | The method table |
| B13 Long-term Retention | VBR v13: Configure, Manage and Recover | 2 | 1% | Tape step order |
| B15 Move and Copy Backups with VeeaMover | VBR v13: Configure, Manage and Recover | 2 | 1% | Move backup |
| B24 Enterprise Plugins | VBR v13: Configure, Manage and Recover | 2 | 1% | Plug-in basics |
| O3 Reports, Dashboards and Business View | VDP: Monitor, Manage, Analyze (Veeam ONE) | 2 | 1% | Reports and Business View |
| O4 Capacity Planning, Deployment Projects and v13 Security | VDP: Monitor, Manage, Analyze (Veeam ONE) | 2 | 1% | Capacity what-ifs |
| R2 Orchestration Plans | VDP: Scale, Automate, Secure (Recovery Orchestrator) | 2 | 1% | Plan types |
| R3 Readiness Checks, DataLabs and Testing | VDP: Scale, Automate, Secure (Recovery Orchestrator) | 2 | 1% | Readiness and DataLabs |
| R4 Plan Execution and Reports | VDP: Scale, Automate, Secure (Recovery Orchestrator) | 2 | 1% | Reports |
| B22 Malware Detection | VBR v13: Configure, Manage and Recover | 1 | 0% | One question |
| B27 Veeam Calculators | VBR v13: Configure, Manage and Recover | 1 | 0% | One question |
| B2 Analysis of Risks to Data | VBR v13: Configure, Manage and Recover | 0 | 0% | Not tested by this bank |
| B18 Incident Response Planning | VBR v13: Configure, Manage and Recover | 0 | 0% | Not tested by this bank |
| B23 Post-Incident Processes | VBR v13: Configure, Manage and Recover | 0 | 0% | Not tested by this bank |
| B25 Monitoring, Alerting, and Reporting | VBR v13: Configure, Manage and Recover | 0 | 0% | Not tested by this bank |
| B26 Troubleshooting | VBR v13: Configure, Manage and Recover | 0 | 0% | Not tested by this bank |
| R1 Deploying Recovery Orchestrator | VDP: Scale, Automate, Secure (Recovery Orchestrator) | 0 | 0% | Not tested by this bank |
B11 alone is 11% of the bank, and the top eight modules are more than half of it. Six course modules have no questions at all; they are listed under gaps.
B11 Backup Infrastructure Optimization, B9 Backup Copy Jobs, B1 Data Protection Strategies, B20 Selecting the Ideal Recovery Method, B21 Enacting a Recovery, B10 Immutability and Hardened Repositories, B5 Protecting Workloads, B14 Scale-out Backup Repository.
Proxies and transport modes, backup copy jobs, RPO/RTO and 3-2-1-1-0, both recovery modules, application-aware processing, hardened repositories and SOBR. This is more than half the bank. Get these to the point where you answer without thinking.
B3 What is Protected?, B19 Advanced Recovery Features, B4 Security and Protection Considerations, B6 Deploying Agents, B16 Recovery Verification, B7 Unstructured Data Backup, B17 Veeam Backup Enterprise Manager, B12 Replication, O1 Deploying and Connecting Veeam ONE, O2 Monitoring, Alarms and Remediation.
Service providers, security settings, agents, advanced restores, SureBackup, file shares, Enterprise Manager, CDP and the Veeam ONE basics. Fewer questions per module, but each is a single fact you know or don’t.
B8 Optimizing Your Backups, B13 Long-term Retention, B15 Move and Copy Backups with VeeaMover, B24 Enterprise Plugins, O3 Reports, Dashboards and Business View, O4 Capacity Planning, Deployment Projects and v13 Security, R2 Orchestration Plans, R3 Readiness Checks, DataLabs and Testing, R4 Plan Execution and Reports, B22 Malware Detection, B27 Veeam Calculators.
The method table, tape, VeeaMover, plug-ins, malware settings, and the rest of Veeam ONE and Recovery Orchestrator. Learn the handful of facts here, then spend the saved time on the gaps, because the real exam asks far more about Veeam ONE and VRO than this bank does.
Also inToastVault 1.2 1.3 1.5 2.1 2.2 2.5·Cards 1.2 1.3 2.1 2.5
The course covers: Backup server, console and web UI; backup proxies and transport modes; repositories, gateway and mount servers; WAN acceleration; installation and system requirements; the configuration database. Course: VBR v13: Configure, Manage and Recover.
The biggest module in the bank, 27 of 236 questions, and almost all of it is which component, which mode, which port. A proxy question is usually decided by one word in the stem: physical, encrypted, vSAN, FC, Hyper-V local storage.
Trap: “Network mode” is never wrong for connectivity, so it shows up as a distractor everywhere. The exam wants the best mode for the stem: Direct SAN for FC and least impact, HotAdd for vSAN or a VM proxy, NBDSSL for encryption.
Add one proxy VM and force each transport mode in turn on the same job, watching which mode the job log reports. Then hide a datastore from the proxy and run again. Lab 1.
Also inToastVault 3.2 3.4 3.6·Cards 3.2 3.4 3.6
The course covers: Backup copy jobs: immediate (mirroring) and periodic (pruning) copy modes, retention and GFS on the copy, the backup copy window, RPO monitoring, WAN acceleration, seeding and mapping. Course: VBR v13: Configure, Manage and Recover.
17 questions, and the most argued-with module in the bank: five keys here disagree with the documentation. The same “change periodic to immediate” question appears three times with three different keys.
Trap: “Copy” in a capacity tier and a backup copy job are different things. A SOBR copy policy copies to object storage inside the repository; a backup copy job is a separate job with its own retention and target.
Create one copy job in each mode against the same source job, run the source three times, and compare the points on the target. Then open the job properties and look for a mode switch. Lab 4.
Also inToastVault 1.1 1.5·Cards 1.1
The course covers: RPO and RTO, the 3-2-1-1-0 rule, matching backup, replication and CDP to business targets, building a protection strategy. Course: VBR v13: Configure, Manage and Recover.
16 questions, all definitions or arithmetic. Several are the same definition asked four ways. Free points if RPO and RTO are automatic.
Trap: Answer options that mention “downtime” describe RTO. If the stem asks for RPO, any option about how long you're down is the distractor.
Write the RPO and RTO of three BreadLab workloads on one line each, and the Veeam feature that meets them. No lab needed.
Also inToastVault 4.1 4.2 4.3 4.5·Cards 4.1 4.2 4.5
The course covers: Choosing between entire VM restore, quick rollback, Instant VM Recovery, VM files restore, guest OS file restore, instant file share recovery and bare-metal restore. Course: VBR v13: Configure, Manage and Recover.
15 questions, all “which restore type”. The stem always contains the deciding fact: what broke, what still works, and how fast it must be back.
Trap: Quick rollback is offered for every whole-VM problem in the options. If the stem mentions failed hardware, a datastore or moving the VM, it can't be quick rollback.
Break a test VM three ways (delete a file, a bad registry change, remove its .vmx) and restore each with the lightest tool. Lab 6.
Also inToastVault 3.5 4.1 4.2 4.5·Cards 3.5 4.1 4.2 4.5
The course covers: Replica failover and failback, planned and permanent failover, undo, failover plans, Instant Recovery and migrating to production. Course: VBR v13: Configure, Manage and Recover.
15 questions, and five of them ask for the failover plan in different words: order, delays, groups, databases before apps.
Trap: “Application group” sounds right for start order, but it only orders VMs inside a SureBackup virtual lab. For real failover it is always a failover plan.
Replicate two VMs, build a failover plan with a 60-second delay, run it, undo it, run it again and fail back. Lab 8 and Lab 7.
Also inToastVault 2.4 3.2 3.3 3.4·Cards 2.4 3.2 3.3 3.4
The course covers: Linux hardened repositories, XFS fast clone, single-use credentials, immutability periods and how they interact with retention and GFS, immutability on object storage. Course: VBR v13: Configure, Manage and Recover.
14 questions. Most are “design an immutable setup”: move the data off the NAS or ReFS server onto a hardened repository, and turn on Object Lock for the offsite copy.
Trap: Reverse incremental and forever forward incremental both rewrite the .vbk, so neither works on an immutable repository. They show up as distractors in every hardened-repository design question.
Build an Ubuntu hardened repository on XFS, back up to it, then try to delete a .vbk as root and read the error. Lab 2.
Also inToastVault 3.6 3.7 3.10 4.4·Cards 3.6 3.7 3.10 4.4
The course covers: Backup jobs for VMware and Hyper-V, object selection by tags, guest processing, application-aware processing, SQL transaction logs, guest interaction proxies and indexing. Course: VBR v13: Configure, Manage and Recover.
14 questions. Seven of them are the same idea: SQL needs application-aware processing, and point-in-time restore needs log backups.
Trap: “Enable SQL log truncation” and “back up logs” look alike. Truncation alone gives no point-in-time restore; you need log backup on an interval.
Back up a SQL VM with AAP off, then on with 15-minute log backup, and open the restore point list in Veeam Explorer for SQL each time.
Also inToastVault 2.3 2.4·Cards 2.3 2.4
The course covers: Scale-out Backup Repositories: performance, capacity and archive tiers, copy and move policies, placement policies, object storage, the archiver appliance. Course: VBR v13: Configure, Manage and Recover.
13 questions, mostly design: which tier, which policy, which mode, to get a second copy offsite or free up local space.
Trap: “Archive tier” is offered whenever a question says “long-term”. Archive only takes GFS points, so it doesn't free local disk of short-term restore points.
Run MinIO with Object Lock on breadweb, add it as a capacity tier, and watch a sealed chain move. Lab 5.
Also inToastVault 1.3 2.1 2.2 2.3 2.4 2.5 3.7 3.9·Cards 1.3 2.1 2.3 2.4 2.5 3.7 3.9
The course covers: A tour of the Veeam Data Platform: what can be protected (virtual, physical, cloud, file and object), the service-provider stack (Cloud Connect, VSPC) and partners. Course: VBR v13: Configure, Manage and Recover.
11 questions. Five are Cloud Connect asked different ways; the rest are “which platforms are supported”.
Trap: VirtualBox and iOS appear as distractors in “which platforms” questions. They are not Veeam workloads.
Skim the platform support list in the v13 user guide and the Cloud Connect overview. No lab.
Also inToastVault 4.1 4.4 4.5·Cards 4.1 4.4 4.5
The course covers: Secure restore, staged restore, Instant Disk Recovery, restore to the cloud, Veeam Explorers. Course: VBR v13: Configure, Manage and Recover.
10 questions. Three disagree with the documentation, all about where Instant Recovery can land.
Trap: “Instant Recovery to EC2” reads like a feature but isn't one; restore to AWS is a full restore through a helper appliance.
Run a secure restore of a test VM and an Instant Disk Recovery of its second disk. Lab 6.
Also inToastVault 2.2 2.5 2.6 3.5 3.10·Cards 2.5 3.5 3.10
The course covers: Securing the backup server: MFA, roles, four-eyes authorization, encryption, locations for data sovereignty, configuration backup and restore. Course: VBR v13: Configure, Manage and Recover.
10 questions: the two configuration-restore modes, MFA details, and location tags, which the bank asks three times with three different keys.
Trap: The location-tag questions offer one valid component each time and the keys differ. Learn the list (virtual infrastructure and repositories) rather than the letter.
Run an encrypted configuration backup, then open the restore wizard far enough to see both modes. Lab 3.
Also inToastVault 3.2 3.6 3.7 3.9·Cards 3.2 3.6 3.7 3.9
The course covers: Veeam Agents for Windows, Linux and cloud machines: protection groups, backup jobs and policies, recovery media, cluster and application support. Course: VBR v13: Configure, Manage and Recover.
10 questions about agents: which group type, which job type, and which feature belongs to which agent.
Trap: “Cloud machines” and “computers” protection groups both fit EC2 instances on paper. If the stem says the server can't reach them directly, it's cloud machines.
Create an AD-based protection group in BreadLab's BREAD.INT domain, scoped to one OU or group, and rescan it.
Also inToastVault 4.5·Cards 4.5
The course covers: SureBackup: virtual labs, application groups, the proxy appliance and masquerade networks, verification tests, content and malware scans. Course: VBR v13: Configure, Manage and Recover.
9 questions, mostly naming the right piece of SureBackup.
Trap: The Security & Compliance Analyzer sounds like a data scanner. It checks the backup server's configuration against best practices, not the contents of backups.
Build a virtual lab and an application group with a DC and one member server, then run a SureBackup job. Lab 9.
Also inToastVault 3.8·Cards 3.8
The course covers: Unstructured data: file shares (SMB, NFS, NAS filer), object storage sources, general-purpose proxies, cache repositories, secondary copies, instant file share recovery. Course: VBR v13: Configure, Manage and Recover.
8 questions, all on the pieces of a file share backup and where to place them.
Trap: “Archive repository” appears next to “secondary copy”. Archive is long-term storage of old versions, not a second copy.
Back up an SMB share from gnas with a cache repository on the backup server, change a few files, and run again.
Also inToastVault 2.5 4.4 4.5·Cards 2.5 4.4 4.5
The course covers: Veeam Backup Enterprise Manager: one view over many backup servers, licensing, roles, self-service restore, application item restore, SAML. Course: VBR v13: Configure, Manage and Recover.
7 questions, each a single Enterprise Manager capability.
Trap: The backup console can do everything Enterprise Manager can for one server. Enterprise Manager is the answer when the stem says many servers, delegated restores or self-service.
Install Enterprise Manager, add the backup server, and create a Restore Operator scoped to file items.
Also inToastVault 3.5 3.6·Cards 3.5 3.6
The course covers: VM replication, replica seeding and mapping, CDP policies and the I/O filter, CDP proxies, short-term restore points. Course: VBR v13: Configure, Manage and Recover.
6 questions: seeding and mapping benefits, and CDP basics.
Trap: “CBT” is offered as how CDP captures writes. CBT is for snapshot-based backup and replication; CDP uses the VAIO I/O filter.
Replicate one VM with seeding from an existing backup and compare the first run's transfer size with a normal replica. Lab 8.
Also inToastVault 5.1·Cards 5.1
The course covers: Veeam ONE architecture and installation, the Veeam ONE Client and Web Client, connecting vSphere, Hyper-V and backup servers. Modules 1 to 4 of the course. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).
6 questions, mostly “which product answers this”. The answer is Veeam ONE whenever the stem asks for reports across the environment.
Trap: Enterprise Manager also reports across backup servers, but it can't see unprotected VMs: it only knows about jobs. “Not protected” means Veeam ONE.
Install Veeam ONE Community Edition and connect the ESXi host and the backup server. Lab 10.
Also inToastVault 5.2 5.3·Cards 5.2 5.3
The course covers: Monitoring virtual and backup infrastructure, alarms and their remediation actions, Intelligent Diagnostics. Modules 5 to 8. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).
6 questions on where things are and which alarm does what.
Trap: Business View appears as a distractor for capacity questions. It groups objects by business meaning; capacity lives in the Infrastructure and Data Protection views.
Also inToastVault 3.2·Cards 3.2
The course covers: Backup methods and their repository I/O, synthetic and active fulls, block size and storage optimisation, compression and deduplication settings. Course: VBR v13: Configure, Manage and Recover.
4 questions, three of them the method table.
Trap: Reverse incremental still appears in the bank, but v13 marks it deprecated. Learn its behaviour for the exam and don't design with it.
Run one job per method against a small VM and watch the files on disk change.
Also inToastVault 3.10·Cards 3.10
The course covers: Long-term retention: GFS, tape infrastructure (tape servers, libraries, media pools), backup to tape and file to tape jobs. Course: VBR v13: Configure, Manage and Recover.
2 questions, both on the order of tape steps.
Trap: “File to tape” can back up VMs' files, but it loses image-level restore. For VMs the answer is backup to tape.
Also inToastVault 2.3 3.4·Cards 2.3 3.4
The course covers: VeeaMover: moving and copying backups between repositories and jobs, keeping block clone, evacuating SOBR extents. Course: VBR v13: Configure, Manage and Recover.
2 questions: consolidating after a merger and leaving a ReFS server.
Trap: Evacuate is only for SOBR extents.
Also inToastVault 3.7 3.9·Cards 3.7 3.9
The course covers: Plug-ins for Oracle RMAN, SAP HANA, SAP on Oracle, Microsoft SQL and others, which send native database backups to Veeam repositories. Course: VBR v13: Configure, Manage and Recover.
2 questions.
Also inToastVault 5.3 5.4·Cards 5.3 5.4
The course covers: Reports, report branding and SSRS, dashboards, Business View categories. Modules 9 and 10. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).
2 questions.
Also inToastVault 5.3 5.4·Cards 5.3 5.4
The course covers: Capacity planning, Deployment Projects (what-if modelling), and the v13 additions: Security & Compliance dashboards and Threat Center. Modules 11 and 12. Course: VDP: Monitor, Manage, Analyze (Veeam ONE).
2 questions.
Also inToastVault 6.2·Cards 6.2
The course covers: Orchestration plans (replica, restore, CDP, storage and cloud plans), plan steps, custom PowerShell steps, plan groups. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).
2 questions, both from the guide.
Also inToastVault 6.3 6.4·Cards 6.3 6.4
The course covers: Readiness checks, DataLabs (built on VBR virtual labs), the Lab Calendar and automated plan tests. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).
2 questions.
Also inToastVault 6.3 6.5·Cards 6.3 6.5
The course covers: Running plans, failback and commit, and the four report types: Plan Definition, Readiness Check, DataLab Test, Plan Execution. Course: VDP: Scale, Automate, Secure (Recovery Orchestrator).
2 questions.
Also inToastVault 2.5·Cards 2.5
The course covers: Inline entropy and file-index malware detection, YARA scans, the Malware Detection settings, notifications, marking restore points clean or infected. Course: VBR v13: Configure, Manage and Recover.
1 question. The blueprint tests more of this than the bank does.
Also inToastVault 1.5
The course covers: Sizing the backup server, proxies and repositories with the Veeam calculators. Course: VBR v13: Configure, Manage and Recover.
1 question.
The exam is written against six blueprint domains, not the courses. ToastVault splits them into 35 topics; each row links to the topic’s notes, the modules that teach it, and the practice questions that tested it.
Passing the practice bank is not the same as covering the blueprint. Compare the exam’s domain weights with where this bank’s questions fall:
| Domain | Title | Exam weight | Bank Qs | Bank share |
|---|---|---|---|---|
| 1 | Fundamentals, Strategy & Design | 14% | 35 | 15% |
| 2 | Deployment, Configuration & Security | 20% | 54 | 23% |
| 3 | Data Protection & Maintenance | 26% | 74 | 31% |
| 4 | Recovery & Verification | 15% | 51 | 22% |
| 5 | Analytics, Monitoring & Observability | 13% | 16 | 7% |
| 6 | Orchestration & Disaster Recovery | 10% | 6 | 3% |
Domains 5 and 6, Veeam ONE and Recovery Orchestrator, carry 23% of the real exam and very little of this bank. Read their ToastVault notes in full and rate yourself on the blueprint checklist; that is where this bank will mislead you about your readiness.
These ToastVault topics have one practice question or none:
And these course modules have no questions in the bank at all:
Malware detection (B22) deserves the most attention of these: the v13 exam leans on inline detection, YARA scans and marking restore points clean or infected, and this bank asks about it once.
These run on BreadLab: the R630’s ESXi host, gnas and breadweb. Each lab is built from specific practice questions. At every step, predict first, then do it and open What you should see. If v13 disagrees with this page, trust v13: note the build number and check the linked doc.
The 10 labs cover 67 of the 236 questions. The other 169 are listed at the end, grouped by why they can’t be labbed.
Five questions turn on which transport mode a proxy picks. The job log tells you, line by line.
Predict: Which mode will a Windows backup server on the same ESXi host use?
If the backup server is a VM on that host, [hotadd]. If it's physical, [nbd]. Direct SAN needs FC/iSCSI access to the LUN that a lab rarely has.
Predict: Does the job fail?
No. With the default Failover to network mode ticked, it falls back to [nbd]. That is Q199. Untick it and the job fails.
Test-NetConnection <esxi> -Port 902.
Predict: What is port 902 for?
NFC traffic for Network mode. That is Q195. 443 is the vSphere API to vCenter.
Seven questions are about what immutability allows. Trying to delete a locked file answers most of them.
mkfs.xfs -b size=4096 -m reflink=1,crc=1 /dev/sdb), mount it, and add it as a Hardened Repository with single-use credentials.
Predict: After the wizard finishes, are the credentials anywhere in Veeam?
No. They are used once to deploy the data mover and discarded. That is Q202. The account can be removed from sudoers afterwards.
Predict: Will the wizard accept it?
No: the minimum is 7 days (Q200).
Predict: What happens?
The wizard refuses or warns: reverse and forever forward rewrite the full. Use forward incremental with synthetic fulls (Q201).
sudo rm on the .vbk, then lsattr on it.
Predict: Can root delete it?
No. lsattr shows the i (immutable) flag. Raise the period in the repository settings and watch it apply on the next run (Q122).
The bank asks about the two configuration restore modes five times.
Predict: Which one carries your stored credentials?
Only the encrypted one (Q205).
Predict: What are the two modes?
Restore (same server, roll back) and Migrate (new server). Q23, Q104, Q158 and Q76.
Six questions, three of them the same one with three different keys. Opening the job settings settles it.
Predict: Where does each read from?
The source job's backup files on the repository, not the VM (Q212).
Predict: How many points does each copy job hold?
Immediate: three. Periodic: one, the latest in its interval.
Predict: Can you?
No. The mode is set at creation. To change it, create a new job and delete the old one: our reading of Q16, Q65 and Q88.
Five SOBR questions come down to copy vs move and sealed chains.
Predict: Can you add it as immutable?
Yes, when Object Lock is on at bucket creation.
Predict: When does data appear in MinIO?
Right after the backup: copy mode (Q15).
Predict: Does anything move?
No: the only chain is active. Add a weekly synthetic full; once a new chain starts, the old one seals and moves (Q203).
Eight questions ask which restore fits a failure. Doing each once makes the choice obvious.
Predict: How long does it take compared with a full restore?
Seconds to minutes: only changed blocks come back (Q218).
Predict: Did you lose any data?
No. The disks never left (Q94).
Predict: Does the VM need to stop?
No (Q59).
Predict: How does Veeam reach the guest?
Through VMware Tools (VIX), Q128.
Predict: When does the scan happen?
Before the data is written back (Q73, Q224).
Four questions on what Instant Recovery actually is.
Predict: Where are its disks?
On a datastore named VeeamBackup_<mount server>: vPower NFS on the mount server (Q219).
Predict: What moves it?
Storage vMotion if licensed, otherwise Veeam Quick Migration (Q100, Q129, Q220).
Thirteen questions. This is the lab that pays most.
Predict: How much data does the seeded job move on its first run?
Only the changes since the backup (Q51, Q90).
Predict: What do you see?
Replicas start in order with the delay (Q12, Q55, Q101, Q102, Q113). The plan then offers Undo, Start, Edit, Delete (Q109).
Predict: Is the change on the original?
No. Undo discards it (Q148, Q213).
Predict: Is the change on the original now?
Yes. Failback carries it home (Q52). Planned failover is the answer for a known outage (Q9, Q118).
Six questions on the parts of SureBackup.
Predict: How will you reach lab VMs from your desktop?
Through masquerade IPs routed via the proxy appliance (Q223).
Predict: What starts first?
The DC (Q83, Q222).
Predict: Does ping pass now?
Yes (Q172).
Predict: Do any VMs start?
No (Q134).
Most of the Veeam ONE questions are “where is it”.
Predict: Which port is in the URL?
1239 (Q225). The v13 Veeam Analytics Service gathers from backup servers (Q226).
Predict: Same view?
No. Datastores are under Infrastructure View (Q67, Q188); repositories under Data Protection View (Q56).
Predict: What does the alarm look for?
Abnormal increment growth (Q228). Approval-gated actions are Q230.
Predict: Where does it show up?
In alarms and reports grouped by that category (Q229).
A mock exam from the full question bank: 100 questions, 150 minutes, the real exam’s length and clock, drawn from all 236. Question order and answer order are shuffled every time, so you can’t pass by remembering that it was “B”. You get no feedback until you submit, and a blank counts as wrong. The real exam is scaled (724 of 1000 to pass), so treat the 73% mark here as a target, not the official cut. Every attempt is saved to your account.
The exam needs the full questions. If they aren’t loaded yet, Start will ask you to sign in first.
This builds itself from the questions you answer in flashcard mode, or mark on the cards below. It ranks the modules you get wrong most often, and gives you the module, its labs and the exact questions to go back to. Once you load the full questions, your answers are saved to your account. Before that, they stay in this browser.
Each entry gives the question in one line, the keyed answer, and why, with the Veeam page that settles it. Q1–Q192 are paraphrased; Q193–Q236 are the study guide’s own questions, in full. Press Load full questions to swap in the real question text and options. That bank is private and needs the site password.
Q1 B14
Where a Jan 1 GFS weekly lives on Mar 20 in a SOBR with a capacity tier (exhibit lost).
Answer: C
Hedged. The SOBR settings were in a lost screenshot. Jan 1 to Mar 20 is about 11 weeks. That is past the 31 day chain but inside the 14 week GFS window, so the point still exists. Which tier holds it depends on the missing move and archive settings. The bank's own date math is also wrong. Scale-Out Backup Repositories
Q2 B24
Protecting an Oracle database that holds all the company's images, with a daily schedule.
Answer: B
The RMAN plug-in uses Oracle's own backup tool. A daily database backup plus archived redo log backups every 15 minutes protects the data well. It keeps data loss small when new photos arrive at random times. Veeam Plug-in for Microsoft SQL
Q3 B3
Which two operating systems Veeam Agents can back up.
Answer: B, E
Veeam Agents run on Windows and on Linux, such as Ubuntu. There is no agent for FreeBSD, IBM iSeries, or iOS (Apple phones). System Requirements
Q4 B10 Lab 2
Meeting 3-2-1 plus 31 days of undeletable backups for backups sitting on a NAS.
Answer: D, E
A NAS repository cannot be made immutable (locked from change). A Linux Hardened Repository can lock the local backups. Turning on S3 Object Lock locks the offsite copy too. The copy job already keeps 24 monthly points, so the 2 year rule is met. Hardened Repository
Q5 B14
A SOBR on AWS S3 as performance tier needs cheap long-term monthly GFS points.
Answer: C
Since v12, a SOBR whose performance tier is object storage can send backups straight to an archive tier. No capacity tier is needed. You add an archive extent that points to S3 Glacier. You do not make a Glacier vault yourself. Veeam documentation
Q6 B1
What an RPO describes.
Answer: D
RPO (Recovery Point Objective) is how much data, in time, you can afford to lose. Downtime is RTO (Recovery Time Objective), not RPO. Backup Methods
Q7 B11
Doing every task without logging on to the backup server locally or over RDP.
Answer: C
Install the Veeam console on your own PC. It connects to the backup server over the network and gives the full set of tasks. Enterprise Manager only covers some tasks. v13: v13 also adds a web UI on the backup server, but the installed console is still the full tool. Transport Modes
Q8 B6
The Exchange DAG setting in a Veeam Agent for Windows job.
Answer: D
An Exchange DAG (database availability group) is built on Windows failover clustering. So the agent job must use the Failover Cluster type to back it up the right way. Protection Groups
Q9 B21 Lab 8
Starting replicas at Site B before a planned overnight power outage at Site A (exhibit lost).
Answer: B
The outage is known ahead of time. Planned failover first syncs the latest changes to the replica, then switches over. So almost no data is lost. The diagram is missing, but the answer does not depend on it. Failover Plans
Q10 B17
Granular restore permissions available to the Enterprise Manager Restore Operator role.
Answer: D
In Enterprise Manager you can limit a Restore Operator to certain restore types. File items is one of them. SharePoint, AD and OneDrive items are not choices there. Veeam Backup Enterprise Manager
Q11 B7
Speeding up NAS file share backup from the main site.
Answer: A
NAS backup reads many small files over the network. Putting the proxy and cache repository on the same network as the NAS cuts delay and speeds up the job. Unstructured Data
Q12 B21 Lab 8
Starting some replicas on a time delay during failover.
Answer: A
A failover plan lets you set the start order of replicas and a delay between them. Application groups belong to SureBackup, not failover. Failover Plans
Q13 B3
What a service provider can deploy from Service Provider Console 7.0.
Answer: C
Veeam Service Provider Console can install Veeam Backup & Replication on managed client sites. It manages the other products but does not deploy them here. System Requirements
Q14 B5
Enabling guest file indexing for a Windows VM job when the guest is unreachable (exhibit lost).
Answer: A
Hedged. The network diagram is missing. Without VMware Tools (VIX), a guest interaction proxy must reach the VM over the network. Which server can do that depends on the lost picture, so A or C could be right. Application-Aware Processing
Q15 B14 Lab 5
A backup that copies itself to different media offsite automatically.
Answer: B
A capacity tier in Copy mode copies each new backup to object storage right away. That gives a second copy, on another media type, off site, with no extra job. Scale-Out Backup Repositories
Q16 B9 Lab 4
Changing a backup copy job from periodic to immediate mode (first of three versions).
Answer: C
Disputed key. The bank keys C; the documentation supports D. You cannot switch an existing backup copy job between periodic and immediate mode. The two modes build chains in different ways. You must make a new job in immediate mode and remove the old one. Backup copy job name (v11 docs)
Q17 B5
The steps to create a backup job for new domain controllers.
Answer: A
The first job skipped guest processing, so backups were crash consistent (like pulling the power). Turning on application-aware processing uses VSS to quiesce the domain controller first. Only A includes that step plus a destination. Application-Aware Processing
Q18 B17
Central licensing and RBAC across three backup servers in three data centres.
Answer: D
Enterprise Manager links many backup servers. It gives one place for licenses and role-based access. It is the least work of the choices. Veeam Backup Enterprise Manager
Q19 B19
A feature of Veeam Explorer for Microsoft Exchange.
Answer: C
Veeam Explorer for Exchange can restore items under litigation hold and in-place hold. Password restore is an AD Explorer feature. BAK export is a SQL feature. Secure Restore
Q20 B4
The component that takes a GDPR location tag (first of three versions).
Answer: A
Location tags mark where data lives, for data rules like GDPR. You can set them on virtual infrastructure like vCenter servers and on repositories. Not on WAN accelerators or proxies. Managing Configuration Database
Q21 B13
Getting VMware VMs and physical Windows servers to tape.
Answer: D
Back up the VMs and physical servers to disk first. Then a backup to tape job copies those backups to tape. This keeps image-level restore and is the most efficient way. Tape Servers
Q22 B20
What file-level restore to the original location of a shared drive needs.
Answer: D
In guest file restore you can use Copy To. It saves files to a local folder or a network share given as a UNC path, like \\server\share. Quick Rollback
Q23 B4 Lab 3
Rolling the configuration back after jobs went missing over the weekend.
Answer: C
Configuration restore has two modes. Restore rolls the same server back to an older state. Migrate moves the setup to a new server. Managing Configuration Database
Q24 B1
Which restore point is valid at 10:00 with a 4-hour RPO.
Answer: A
The best restore point is the newest one before the disaster. 9:30 AM loses only 30 minutes of data. 1 PM is after the disaster. Backup Methods
Q25 B10
When a point becomes deletable with 60-day immutability on a hardened repository.
Answer: C
The GFS monthly point keeps its own retention of 6 months, and on a hardened repository it stays locked for that time. From 27 May that ends on 27 Nov. Retention removes it the next day, 28 Nov. Hardened Repository
Q26 B11
Why Backup from Storage Snapshots on a Nimble array falls back to normal backup.
Answer: B
Backup from storage snapshots only works if Veeam knows the array. You must add the Nimble array under Storage Infrastructure first. Transport Modes
Q27 B20 Lab 6
When Quick Rollback can be used for a Windows VM on VMware.
Answer: D
Quick Rollback restores only changed blocks to the same VM in its original place. It suits guest OS problems like user mistakes or malware. It is not for storage faults or moving the VM. Quick Rollback
Q28 B9
Copying VM and agent backups to the alternate site on a schedule.
Answer: D
Disputed key. The bank keys D; the documentation supports B. A normal backup copy job, periodic or not, cannot copy file share backups. You add a secondary repository in the file share backup job, with its own retention. Veeam then makes the copy job for you. File share backup secondary target
Q29 B11
The proxy for Hyper-V VMs on local storage.
Answer: D
With on-host mode, the Hyper-V host itself acts as the proxy. It reads VM disks on local storage. Off-host needs shared storage. Transport Modes
Q30 B6
A feature only Veeam Agent for Microsoft Windows has.
Answer: B
Backup from storage snapshots for agent jobs works only with the Windows agent. Linux agents can do volume and file backups, and app-aware PostgreSQL is a Linux feature. Protection Groups
Q31 B7
The step before you can create a NAS backup job.
Answer: D
Before a NAS backup job, the share must be added to the inventory. You add a file share and pick its type. NAS filer is used for enterprise storage arrays; SMB or NFS share is the other choice. Unstructured Data
Q32 B11
Backing up encrypted vSphere VMs when security outranks everything.
Answer: B
Encrypted vSphere VMs cannot use Direct SAN mode. NBDSSL sends data over an encrypted network link. With job encryption on, the data stays encrypted end to end. Transport Modes
Q33 B17
Letting SQL DBAs restore their own databases without wider access.
Answer: C
In Enterprise Manager you can give a group the Restore Operator role and limit it to SQL database restores. That gives the DBAs only what they need. Veeam Backup Enterprise Manager
Q34 B11
Scaling an all-in-one backup server that has outgrown itself.
Answer: C
The job stats show the proxy is the bottleneck (slowest part). Adding another proxy spreads the work. Splitting jobs on the same proxy would not help. Transport Modes
Q35 B5
Protecting a snapshot-sensitive SQL VM that may only be snapshotted at 03:00.
Answer: A, E
The VM snapshot runs once a day. To meet a 1 hour RPO for databases, turn on transaction log processing. Then set SQL logs to back up on a schedule, like every hour. Application-Aware Processing
Q36 B20
Getting users back to their files after the NAS hardware dies.
Answer: B
Instant file share recovery publishes the share straight from the backup. Users can work again fast while you fix or replace the NAS. Quick Rollback
Q37 B20
Recovering a damaged physical Linux server onto vSphere quickly.
Answer: A
Instant VM Recovery can start a Linux agent backup as a vSphere VM right away. Users can reach it in minutes, which gives the lowest RTO. Quick Rollback
Q38 B16 Lab 9
Testing OS updates against an app in an isolated non-production environment.
Answer: C
A virtual lab is an isolated sandbox. You can start VMs from backups there and test updates without touching production. SureBackup
Q39 B5
A job that picks up new VMware-hosted SQL servers by itself.
Answer: A
If the job targets a vSphere tag, any new VM given that tag is added on the next run. No manual edit is needed. Application-Aware Processing
Q40 B11
The API for automating Veeam Backup & Replication.
Answer: B
The backup server has its own REST API for automation. Veeam ONE has a separate API. PowerShell runs on the backup server, not through Enterprise Manager. Transport Modes
Q41 B24
What kind of backup the enterprise application plug-ins produce.
Answer: B
Plug-ins work with the app's own backup tools, like RMAN or SAP HANA. They make transaction consistent backups of the database and its logs, not the whole server. Veeam Plug-in for Microsoft SQL
Q42 B9
Copying seven Hyper-V VMs' daily backups offsite with long retention.
Answer: D
62 days of short-term retention covers any day within two months. 26 weekly GFS points covers any week within six months. Only D has both. Backup Copy
Q43 B11 Lab 1
Backing up VMs on an FC SAN with the least impact on hosts.
Answer: C
Direct storage access (Direct SAN) reads VM data straight from the Fibre Channel SAN. It skips the ESXi hosts and production network, so impact is lowest. Transport Modes
Q44 B13
Getting Hyper-V VMs to tape: the order of steps.
Answer: D
Tape jobs write to media pools, so create media pools first. Then a backup to tape job puts the VM backups on tape. Media sets are made automatically. Tape Servers
Q45 B3
Which workload Veeam can protect with image-level backups.
Answer: B
Veeam has an agent for Oracle Solaris, so it can make image-level backups of it. AS/400, HP-UX and iOS have no Veeam agent. System Requirements
Q46 B20
Migrating a physical Linux file server with several large volumes to ESXi.
Answer: B
Instant VM Recovery can start the agent backup as a VMware VM right away. You then move it to production storage. The other choices need much more time. Quick Rollback
Q47 B9 Lab 4
Getting told when backups miss an 8-hour offsite copy window.
Answer: D
Backup copy jobs have an RPO monitor. You set a time, like 8 hours. Veeam alerts you if no new copy lands within that time. Backup Copy
Q48 B6
Protecting a whole physical Windows SQL server.
Answer: A
To protect a whole physical server, use the Veeam Agent. It backs up the full machine, and app-aware mode keeps SQL consistent. Note: SQL Server 2020 does not exist; the stem likely meant 2019 or 2022. Protection Groups
Q49 B19
Moving workloads from VMware backups into AWS, Azure and GCE.
Answer: D
Restoring on-prem backups to AWS, Azure or Google needs a small helper or proxy appliance in that cloud. It speeds up the restore. WAN accelerators do not work for cloud restores. Secure Restore
Q50 B5
The setting that captures both VM disks and SQL transaction logs.
Answer: D
Application-aware processing makes the SQL backup consistent. It is also the setting that unlocks SQL transaction log backup. The other choices do not handle logs. Application-Aware Processing
Q51 B12 Lab 8
The main benefit of replica seeding.
Answer: D
Seeding means the first replica is built from a backup already at the DR site. Only changes then cross the WAN. So WAN traffic goes down. Replica Seeding and Mapping
Q52 B21 Lab 8
The replication function that sends failover-time changes back to production.
Answer: A
The option reads 'Fallback' but means Failback. Failback sends the changes made on the replica back to the original VM. Undo failover throws those changes away. Failover Plans
Q53 B16
What a SureBackup-style validation proves for ransomware readiness.
Answer: B
SureBackup boots backups in an isolated lab to prove they work. It can also run a malware scan. That covers validation and security. 'Ransomware-free' is a strong claim, but B is the best fit. SureBackup
Q54 B19
Restoring a photo server while honouring customers' deletion requests.
Answer: C
Staged Restore boots the VM in a virtual lab first. A script runs there, for example to delete data for privacy rules. Then the VM goes to production. Secure Restore
Q55 B21 Lab 8
Planning in advance for apps to start in a set order during a disaster.
Answer: C
A failover plan starts replicas in a set order with delays you choose. It is made before a disaster. An application group only orders VMs inside a SureBackup test. Failover Plans
Q56 O2 Lab 10
Checking repository capacity across five backup servers in Veeam ONE.
Answer: D
In Veeam ONE Client, the Data Protection View shows backup servers and their repositories. It shows free and used repository space. The Infrastructure View shows hypervisors, not repositories. Veeam ONE 13 ports
Q57 B14 Lab 5
Adding 12 monthly GFS points when the NAS repository holds only 14 days.
Answer: D
Add object storage as a capacity tier in move mode. Backups older than 14 days leave the NAS. GFS fulls then live in the cloud. Copy-only mode would not free any space. Scale-Out Backup Repositories
Q58 B10
Getting an immutable copy of backups now on a Windows repository.
Answer: A
Periodic copy mode runs on a schedule, such as once a day. It copies only the latest point. Immediate mode and capacity tier copy mode send data as soon as each backup ends. Hardened Repository
Q59 B19 Lab 6
Fixing one corrupted data disk on a critical VMware server fastest.
Answer: A
Instant Disk Recovery mounts just the bad disk from the backup, straight to the running VM. The VM keeps working. No full VM restore is needed. Secure Restore
Q60 O1
Why install Veeam ONE before Veeam Backup & Replication.
Answer: D
Veeam ONE watches the virtual setup before backups start. It can find problems like low datastore space early. It is not a requirement for installing VBR. Veeam ONE 13 ports
Q61 B16
Meeting a compliance list of automated recovery tests.
Answer: B
SureBackup starts backups in an isolated lab. It runs tests and can do a malware scan. It can email a report when done. SureBackup
Q62 B10
Why a restore point on S3 outlived its 31-day retention and immutability.
Answer: D
Hedged. VBR has no well-known 'retention exception' setting. A likelier cause: with object storage, immutability plus extra block-generation days can hold data longer than 60 days. Disabled jobs are now cleaned by background retention. D is the bank's choice, but the question is weak. v13: Since v12, background retention also cleans up points of disabled jobs, which removes option A. Hardened Repository
Q63 B11 Lab 1
The transport mode for an isolated proxy on vSAN.
Answer: D
Virtual appliance (hot-add) mode reads disks through the proxy VM itself. It does not use the host's VMkernel network. Network mode does use it. Direct SAN and Direct NFS do not work with vSAN. Transport Modes
Q64 B7
Keeping more than one copy of NAS share backups.
Answer: B
A NAS backup job can send a secondary copy to another repository. That gives a second copy of the file data. An archive repository is for long-term storage, not a true second copy. Unstructured Data
Q65 B9 Lab 4
Changing a backup copy job from periodic to immediate mode (second version).
Answer: C
Disputed key. The bank keys C; the documentation supports D. You cannot switch a backup copy job between immediate and periodic mode. The two modes work in different ways. You must make a new job with the new mode and remove the old one. Backup Copy
Q66 B4
What happens after more than five wrong MFA codes.
Answer: C
After five wrong MFA codes, Veeam locks the user out for one minute. Then the user can try again. It is not a long or permanent lock. Managing Configuration Database
Q67 O2 Lab 10
Where Veeam ONE shows VMware datastore capacity (first version).
Answer: A
In Veeam ONE Client, the Infrastructure View has a datastore list. Each datastore shows capacity and free space. Business View groups things by business use instead. Veeam ONE 13 ports
Q68 B9
Copying SQL VM backups and their 30-minute log backups offsite.
Answer: A
Disputed key. The bank keys A; the documentation supports D. Only immediate copy mode can copy SQL transaction log backups. Periodic copy mode copies only image backups and skips logs. To get the database and all logs to DR, use immediate mode. Backup Copy
Q69 B9
Replacing an old ReFS repository with a new Windows server.
Answer: A
Disputed key. The bank keys A; the documentation supports C. Copying files to new ReFS storage loses block clone sharing, so files grow. Veeam's Move backup feature keeps block clone savings and repoints the job. A backup copy job makes a new chain, not a move. Backup Copy
Q70 B20
Recovering a damaged physical Windows server onto vSphere quickly.
Answer: D
Instant VM Recovery can start an agent backup as a VM on vSphere in minutes. It runs straight from the backup. That gives the lowest restore time. Quick Rollback
Q71 B11
Remote-site backups slowing down as data grows over the WAN.
Answer: D
WAN accelerators remove repeat data before it crosses a slow link. Less data means faster copies on 20 Mbps. They need the right license edition. Transport Modes
Q72 B17
Letting developers restore their own files without IT.
Answer: C
Enterprise Manager has a self-service portal. Users can restore files from their own VMs. The backup team no longer handles each request. v13: Enterprise Manager still exists in v13 but is a Windows install; it is not part of the Linux-based Veeam Software Appliance. Veeam Backup Enterprise Manager
Q73 B19 Lab 6
What Secure Restore checks during a restore.
Answer: D
Secure Restore scans the restored data with antivirus before it goes back to production. If malware is found, you can stop or restore with the network off. Secure Restore
Q74 B1
Two apps that can't be down more than 4 hours while backups run nightly.
Answer: D
The option name is garbled but means CDP (continuous data protection). It keeps data loss to seconds. Failover to a replica is fast. Hourly replication could also meet a 1-hour RPO, so the question is loose. Backup Methods
Q75 B3
Two services a Veeam Cloud Service Provider offers.
Answer: A, E
Veeam Cloud Connect lets providers sell Backup as a Service and Disaster Recovery as a Service. The other options are not Veeam services. System Requirements
Q76 B4 Lab 3
The configuration restore mode for moving to new servers.
Answer: D
Configuration restore has two modes: Restore and Migrate. Migrate is for moving the VBR server and its database to new machines. Managing Configuration Database
Q77 B6
A protection group for one department's Windows servers.
Answer: A
A protection group can point at an Active Directory group. VBR rescans it on a schedule. New computers added to that group are picked up on their own. Protection Groups
Q78 B19
Recovering into AWS when local backups are gone and only Wasabi copies remain.
Answer: A
Disputed key. The bank keys A; the documentation supports D. Instant Recovery can run from capacity tier object storage like Wasabi, back to local vSphere. VBR has no 'instant' restore to EC2; that is a full restore. Wasabi has no VM compute. Restore from capacity tier
Q79 B5
Adding VMs with a custom application to a job automatically.
Answer: C
A backup job can select VMs by vSphere tag. Tag the VMs that have the app. New tagged VMs join the job on its next run. Application-Aware Processing
Q80 B20 Lab 6
When Quick Rollback can be used for a Linux VM on Hyper-V.
Answer: B
Quick rollback restores only changed blocks to the same VM in the same place. It suits software problems inside the guest, like a bad patch. It is not for hardware or storage faults or moves. Quick Rollback
Q81 B1
The feature with the lowest RPO.
Answer: B
CDP sends write changes almost in real time. Data loss is seconds. Snapshot replication and backups work in minutes or hours. Backup Methods
Q82 B20
Migrating a physical Windows file server with large volumes to ESXi.
Answer: D
Instant VM Recovery runs the agent backup as a VM on ESXi right away. Then you migrate it to production storage. This is fastest even with large disks. Quick Rollback
Q83 B16 Lab 9
The SureBackup feature that identifies dependent VMs for an on-demand lab.
Answer: A
An application group lists the VMs to start in the lab, and their boot order. The virtual lab is the isolated network they run in. SureBackup
Q84 B1
What a Recovery Point Objective is.
Answer: B
RPO is how much data you can lose, counted in time. For example, 1 hour of data. RTO is how long the restore may take. Backup Methods
Q85 B5
Protecting a 3-node SQL Always On cluster with 1-day and 15-minute RPOs.
Answer: A
A VM backup job with application-aware processing supports SQL Always On groups. Run it daily and set log backup every 15 minutes. That meets both RPOs. Application-Aware Processing
Q86 B10
Choosing tiers and modes for an immutable SOBR with an on-prem server.
Answer: D
Windows ReFS cannot be made immutable, so use a Linux hardened repository. The local server holds only 21 days, so use copy and move mode. S3 keeps the full 60 days with Object Lock. Hardened Repository
Q87 B9 Lab 4
The backup copy setting that keeps copies off a busy WAN during the day.
Answer: D
The backup copy window sets hours when the job may send data. Block business hours and copies run only after hours. Backup Copy
Q88 B9 Lab 4
Changing a backup copy job from periodic to immediate mode (third version).
Answer: A
Disputed key. The bank keys A; the documentation supports D. Same point as question 65. The copy mode is locked once the job exists. There is no setting to flip it. Make a new job and delete the old one. Backup Copy
Q89 B5
Recovering one SQL database consistently with the least production impact.
Answer: A
Turn on SQL transaction log backup every 30 minutes. Logs are small and light on production. Veeam Explorer for SQL can then restore to a point in time without SSMS. Application-Aware Processing
Q90 B12 Lab 8
The main benefit of replica mapping.
Answer: C
Replica mapping links the job to an existing VM at the DR site. Only changes are sent. So less data crosses the WAN. Replica Seeding and Mapping
Q91 B3
Two public clouds Veeam backs up without an agent.
Answer: A, E
Veeam Backup for AWS and Veeam Backup for Microsoft Azure protect cloud VMs with snapshots. No agent goes inside the VM. VirtualBox is not a cloud. System Requirements
Q92 B3
What a service provider can deploy from Service Provider Console v7.0 (second version).
Answer: B
Service Provider Console can push and manage Veeam Agents on client computers. It does not deploy Veeam ONE or Microsoft 365 backup. System Requirements
Q93 B14
Adding capacity in v12 when the only repository is a full FC-attached Windows server.
Answer: B
Capacity tier must be object storage, so StoreOnce is out. Windows cannot be a hardened repository. In v12, Google Cloud Storage did not support immutability, so S3 with Object Lock is the pick. v13: Current Veeam docs list Google Cloud as supporting capacity tier immutability, so D would also work in newer versions. Veeam documentation
Q94 B20 Lab 6
Ten VMs orphaned after an outage, with their disk files intact.
Answer: C
The disks are fine and current. Only the VM config files are lost. Restore VM files can bring back just the .vmx file. Then register the VM and no data is lost. Quick Rollback
Q95 B9
Copying hourly VMware backups offsite with long-term retention.
Answer: B
Periodic mode once a day gives one point per day. Keep 62 daily points for two months. Add 26 weekly GFS fulls for six months. This uses less space than 180 dailies. Backup Copy
Q96 O2
Diagnosing known configuration and performance issues without Veeam Support.
Answer: A
Veeam ONE Intelligent Diagnostics reads VBR logs. It matches them to known issues from Veeam support. It suggests fixes without a support case. Veeam ONE 13 ports
Q97 B6
Deploying Veeam Agents to Windows and Linux EC2 instances.
Answer: D
Cloud machines is the protection group type for AWS EC2 and Azure VMs. Veeam finds and reaches them through the cloud provider's API. So the distribution server does not need direct network access. Protection Groups
Q98 B7
What the NAS cache repository is for.
Answer: D
For file share backup, the cache repository holds temporary metadata. It tracks which files and folders changed. This makes the next incremental run faster. Unstructured Data
Q99 B6
A feature only Veeam Agent for Linux has.
Answer: C
Hedged. Backup from native snapshots (LVM or Btrfs snapshots) is a Linux agent feature. But PostgreSQL app-aware processing is also Linux-only, because the Windows agent does not support PostgreSQL. So option B is arguably correct too. The question is poorly written. Protection Groups
Q100 B21 Lab 7
Making a VM running from Instant Recovery permanent.
Answer: A
Instant VM Recovery runs the VM straight from the backup file. That is temporary. To finish, you move the VM to production storage with Migrate to production (Storage vMotion or Quick Migration). Failover Plans
Q101 B21 Lab 8
Failing interdependent VMs over one by one as a group.
Answer: D
A failover plan groups replicas. It fails them over one at a time in a set order. You can also set a delay between VMs. Failover Plans
Q102 B21 Lab 8
Starting VMs in order with delays during a disaster.
Answer: B
A failover plan lets you set the boot order of VMs. It also lets you set a delay between each VM start. Failover Plans
Q103 B11
Why a proxy picked a different transport mode than expected (exhibit lost).
Answer: C
The exhibit is lost. It probably showed Direct SAN access mode with no fallback to network mode. Direct SAN restore works only for thick disks. So a thin disk restore fails. CBT state does not stop a restore. Transport Modes
Q104 B4 Lab 3
The configuration restore mode for a corrupted configuration database.
Answer: B
Configuration restore has two modes: Restore and Migrate. Restore is for a damaged or lost database. Migrate is for moving the configuration to a new backup server. Managing Configuration Database
Q105 B9
Sending daily backups from Site B to the main site: job type and data path (exhibit lost).
Answer: A
Hedged. The component diagram is lost, so the numbers cannot be checked. A backup copy job is right. It reads existing backups, so the source VMs are not touched again. WAN accelerators help with the slow link. Backup Copy
Q106 B4
The component that takes a GDPR location tag (second version).
Answer: C
You can tag a location on infrastructure items that hold or produce data. These include backup repositories and scale-out repositories. Veeam then warns you if data would move to another location. Proxies, WAN accelerators and file copy jobs cannot take a location tag. Managing Configuration Database
Q107 B1
What is wrong with a coworker's new deployment from a list of notes.
Answer: C
Each job writes to only one place. There is no backup copy job. So each workload has just one backup copy. That fails the 3-2-1 rule. Backup Methods
Q108 B9
Sending backups from Site B to the main site: job type and data path (exhibit lost).
Answer: A
Hedged. The component diagram is lost, so the numbers cannot be checked. A backup copy job through WAN accelerators fits the slow link. Option A matches the twin question, but I cannot confirm the path. Backup Copy
Q109 B21 Lab 8
The actions available right after a planned failover finishes.
Answer: A
After a failover plan has run, you can undo it to go back to the source VMs. You can also start, edit or delete the plan. There is no Cancel or Copy action for a plan. Failover Plans
Q110 B11
Why each site should have a proxy for replication (first version).
Answer: E
For replication, Veeam needs a source proxy and a target proxy. A proxy at each site gives a stable data transfer between the sites. Snapshots and WAN acceleration do not depend on this. Transport Modes
Q111 B20
Recovering a damaged physical Windows server onto Hyper-V quickly.
Answer: A
Instant Recovery can start an agent backup as a Hyper-V VM directly from the backup file. That is the fastest way back online. Bare metal restore and export take much longer. Quick Rollback
Q112 B11
Slow backups after adding a Data Domain appliance.
Answer: C
A Data Domain needs a gateway server to talk to it. If no gateway is set, the backup server often takes that role. That adds load to the backup server. Transport Modes
Q113 B21 Lab 8
Booting database servers before application servers during failover.
Answer: A
A failover plan sets the order VMs start in. Put the database servers first. Then add a delay before the application servers start. Failover Plans
Q114 B15
Consolidating two companies' backups after a merger.
Answer: C
Since v12, you can move a machine's backups to another job. Veeam does this with no extra tools. Copying files by hand or with outside tools breaks the link to the job. Moving Backups
Q115 B9
Copying vSphere Windows and Hyper-V Linux backups offsite.
Answer: B
Only immediate copy mode copies transaction log backups. A backup copy job handles one platform type. VMware and Hyper-V backups therefore need two separate jobs. Backup Copy
Q116 B1
Making on-prem object storage backups conform to the 3-2-1 rule.
Answer: B
3-2-1 needs a second copy, on another media type, kept offsite. A backup copy job to public cloud object storage does all of this. Snapshots and same-building copies do not count as offsite. Backup Methods
Q117 B10 Lab 2
An on-prem-only SOBR whose data can't be deleted for 14 days.
Answer: A
Only A uses on-premises storage on both tiers. A hardened repository and S3-compatible object storage can both be immutable. Windows ReFS has no Veeam immutability. Amazon S3 is a public cloud, not on-premises. Hardened Repository
Q118 B21 Lab 8
Starting replicas at Site B before a planned power outage at Site A.
Answer: B
Planned failover runs one more sync of the replicas. Then it shuts down the source VMs and starts the replicas. This gives the least data loss before a known outage. Failover Plans
Q119 B10
Meeting 3-2-1 plus 31 days of undeletable backups (second version).
Answer: D, E
The NAS repository cannot be made immutable by Veeam. Moving the backups to a hardened repository fixes the local copy. Turning on immutability for the S3 copy protects the offsite copy and its monthly GFS points. v13: Note: S3 Object Lock usually has to be enabled when the bucket is created. Hardened Repository
Q120 B14 Lab 5
A backup that moves data to different media after a set time.
Answer: D
The Move option in a capacity tier moves older backups to object storage after a set number of days. Object storage is a different media type and can be offsite. No extra job is needed. Scale-Out Backup Repositories
Q121 B7
The component unstructured data backup needs.
Answer: A
File share and object storage backup needs a general-purpose backup proxy. It reads the source data and sends it to the repository. Unstructured Data
Q122 B10 Lab 2
What raising the immutability period on a repository changes.
Answer: A
On a hardened repository, Veeam keeps extending the lock on the active chain. When you raise the period, the new value is used for the active chain and new chains on the next run. Hardened Repository
Q123 B6
Protecting a whole physical Windows server running SQL.
Answer: B
A physical server needs Veeam Agent to back up the whole machine. The agent can also do application-aware processing for SQL Server. Protection Groups
Q124 B4
The component that takes a data-sovereignty location tag (third version).
Answer: C
Same as question 106. Locations can be set on repositories and scale-out repositories. Proxies, WAN accelerators and file copy jobs cannot take a location. Managing Configuration Database
Q125 B6
Which target a standalone Veeam Agent for Windows can't write to.
Answer: A
Veeam Agent for Windows can write recovery media to removable storage, an optical disc, or an ISO file. It cannot write recovery media to object storage, a Veeam repository, or tape. Protection Groups
Q126 B9
Copying Site A backups offsite with long retention.
Answer: A
62 days of daily points covers any day in the last two months. 26 weekly GFS points covers about six months. Six monthly points would not allow a restore from any week. Backup Copy
Q127 B14
Using S3-compatible storage at the secondary site for longer retention.
Answer: D
Backups must be kept for 30 days, so the job retention must be 30 days. A capacity tier in Move mode set to 14 days sends older backups to S3. Weekly fulls close each chain, so it can be moved. Scale-Out Backup Repositories
Q128 B20 Lab 6
Restoring a corrupted file on a VMware Windows VM with VMware Tools.
Answer: B
When the mount server cannot reach the VM over the network, Veeam can use VMware Tools. It copies the file through the vSphere API (VIX). This is fast and needs no Instant Recovery. Quick Rollback
Q129 B21 Lab 7
Making an Instant Recovery VM permanent (second version).
Answer: B
Same as question 100. Instant Recovery runs the VM from the backup. You finish by moving it to production storage with Migrate to production. Failover Plans
Q130 B11
What happens to a server when its proxy role is removed.
Answer: A
Removing the proxy role only removes that role. The server stays in the managed servers list. You must remove it there separately. Transport Modes
Q131 B14
Where the archiver appliance runs for an Azure archive tier.
Answer: C
For an Azure archive tier, Veeam deploys a temporary helper VM in Azure. It packs and moves data between the capacity and archive tiers. It runs only during archiving. Scale-Out Backup Repositories
Q132 B3
Copying backups to a service provider without a VPN.
Answer: D
Cloud Connect sends backups to a service provider over a single secure TLS port. No VPN is needed. System Requirements
Q133 B1
The part of 3-2-1-1-0 still missing after adding an offsite copy.
Answer: D
In 3-2-1-1-0, the 0 means zero errors after automated restore testing, such as SureBackup. The company already has the offsite immutable copy. Testing is what is missing. Backup Methods
Q134 B16 Lab 9
A SureBackup job that only scans backups for malware.
Answer: D
Backup verification and content scan mode checks the backup file and scans it for malware. It does not start VMs in a virtual lab. So it is faster than full recoverability testing. SureBackup
Q135 B3
The feature that lets VCSPs offer backup and replication services.
Answer: B
Cloud Connect lets service providers offer cloud backup and replication to their customers. The other names are not Veeam features for this. System Requirements
Q136 B10
Fixing slow, insecure fulls on an NFS NAS repository.
Answer: B
A hardened repository adds immutability for security. XFS with Fast Clone builds synthetic fulls by referencing existing blocks. So each full uses very little extra space and is fast. Hardened Repository
Q137 B17
What Enterprise Manager can restore.
Answer: C
Enterprise Manager can restore PostgreSQL instances. AD accounts, Teams chats and SharePoint Online items are not restored from Enterprise Manager. Enterprise Manager: restore PostgreSQL
Q138 B20
Bringing a bare-metal Red Hat server back after total failure.
Answer: B
To restore a whole physical Linux server, boot it from Veeam Recovery Media. Then run a bare metal restore from the backup. Quick Rollback
Q139 B19
Restoring a database server without its sensitive data.
Answer: C
Staged Restore starts the machine in a virtual lab first. A script removes the sensitive data there. Then the clean machine is restored to production. Secure Restore
Q140 B20
Which of four VM problems a Full VM Restore can fix.
Answer: D
Quick Rollback restores only changed blocks. It works only for problems inside the guest OS, such as a failed update. It is not for storage, host, or hardware problems. Quick Rollback
Q141 B3
Replicating VMs to a service provider without VPNs.
Answer: B
Cloud Connect replication sends VMs to a service provider over a secure TLS link. It needs no VPN. System Requirements
Q142 B14
Adding capacity in v12.1 when the only repository is a full FC-attached Windows server.
Answer: A
An immutable S3 bucket as the capacity tier gives an offsite immutable copy on different media. In v12, Windows repositories cannot be immutable. An SMB share cannot be immutable either. Scale-Out Backup Repositories
Q143 B27
Preparing the backup server for a merger that adds workloads.
Answer: D
One backup server will manage more jobs and tasks. So you must check that its CPU and RAM still meet sizing needs for the extra load. Backup Server system requirements
Q144 B11
Why installing on Windows 2008 R2 fails.
Answer: C
Windows Server 2008 R2 is not supported for a VBR v12 backup server. 8 CPUs and 16 GB RAM are enough. A firewall would not block the install itself. v13: v13 can also be deployed as the Linux-based Veeam Software Appliance. Old Windows versions are still not supported. Transport Modes
Q145 B11
A large, I/O-heavy VM suffers during backup snapshots.
Answer: C
The stun happens when a big VMware snapshot is merged. Backup from Storage Snapshots keeps the VM snapshot open only for seconds. So the merge is small and the stun goes away. Transport Modes
Q146 O1
A list of all VMs that are not protected.
Answer: D
Veeam ONE watches both vCenter and the backup server. Its Protected VMs report lists VMs that have no backup. That is what management asked for. Veeam ONE 13 ports
Q147 O1
Reports of which servers are and are not backed up.
Answer: C
Veeam ONE is the reporting tool. Its reports show which machines backed up fine and which failed or were missed. Veeam ONE 13 ports
Q148 B21 Lab 8
Going back to production after failover, discarding DR-side changes.
Answer: C
Undo failover powers off the replica and goes back to the original VM. Any changes made on the replica are thrown away. Failback would keep those changes. Failover Plans
Q149 O4
Justifying (or rejecting) a hardware purchase request with data.
Answer: C
Hedged. Deployment Projects model future resource needs, like adding hosts or VMs, in charts. That fits a hardware request. But Jobs Calendar shows when backups run, which fits the off hours part. The question is vague. Veeam ONE deployment projects
Q150 B9
Reusing old backups as a seed after a site swap.
Answer: C
Backup copy mapping points the job at the old backup chain on the target. Veeam then only sends the changes. That makes the first copy much faster than a full copy. Backup Copy
Q151 B8
Tuning jobs when object storage replaces block storage.
Answer: A
Object storage holds one object per data block. Bigger blocks (4 MB) mean fewer objects. That is the vendor's goal. Backup Methods
Q152 B5
Two ways to back up SQL to Veeam with Microsoft's native tools.
Answer: A, D
The SQL plug-in lets DBAs use native SQL tools (SSMS, T-SQL) to send backups to a Veeam repo. App-aware processing uses the SQL VSS writer. The other options are not real products or do not back up SQL. Veeam Plug-in for Microsoft SQL
Q153 B10
Choosing tiers and modes for an immutable SOBR (second version).
Answer: B
Copy mode sends every backup to AWS. Move mode frees local space after 21 days. A hardened Linux repo on XFS gives local immutability. Windows ReFS repos cannot be immutable. Hardened Repository
Q154 B14
The lowest-cost storage tier on Azure in a SOBR.
Answer: A
The cheapest Azure Blob tier is the Archive tier. Veeam needs a short-lived archiver appliance VM in Azure to move data into that tier. Scale-Out Backup Repositories
Q155 B15
Moving backups from a ReFS server to a new hardened repository.
Answer: B
The Move backup option moves the backup files and repoints the job in one step. Changing the job target alone would start a new full backup. Evacuate is for SOBR extents only. Moving Backups
Q156 B7
What NAS backup supports in v12.1.
Answer: A
VBR 12.1 backs up file shares, including NFS shares. It does not back up ESXi hosts, HP-UX, or AS/400 systems. Unstructured Data
Q157 B11
Installing on a physical server that has no mouse.
Answer: A
VBR supports an unattended (silent) install from the command line. You can type it with just the keyboard. The VBR ISO is not a bootable installer. v13: v13 adds the Veeam Software Appliance, a bootable ISO, but the Windows install still uses a silent command-line install. Transport Modes
Q158 B4 Lab 3
Rolling back the configuration after replica jobs went missing.
Answer: C
Use Configuration Restore with a configuration backup file. It rolls the config database back to the saved state, so the missing replica jobs come back. Managing Configuration Database
Q159 B12
A recovery option CDP replicas offer.
Answer: A
CDP keeps short-term restore points every few seconds. You can roll a replica back to a point seconds or minutes ago. Replica Seeding and Mapping
Q160 B12
Protecting tenant VMs where no data loss is acceptable.
Answer: D
CDP replicates I/O almost in real time. RPO can be a few seconds. That suits VMs where almost no data loss is allowed. Replica Seeding and Mapping
Q161 B3
What Cloud Connect provides when linking to a provider.
Answer: A
Cloud Connect gives a secure TLS link to the provider over the internet. It uses one port and needs no VPN. System Requirements
Q162 B1
Naming the 15-minute limit on lost transactions.
Answer: C
RPO is how much data you can lose, measured in time. Losing no more than 15 minutes of transactions is an RPO. Backup Methods
Q163 B1
The correct meaning of RPO.
Answer: B
RPO means Recovery Point Objective. It is the amount of time in which data loss is accepted. Backup Methods
Q164 B19
Which Oracle failure Veeam Explorer can fix.
Answer: B
Enterprise Manager can restore Oracle databases from image backups made with application-aware processing. It cannot restore RMAN plug-in backups. Secure Restore
Q165 B10 Lab 2
Why immutable points outlive retention on an XFS hardened repository.
Answer: C
Fast clone works on XFS. But immutable files cannot be deleted until the lock ends. If the lock period is long, old chains stay on disk, so storage grows. Hardened Repository
Q166 B22
Notifying security whenever malware is found in backups.
Answer: C
In 12.1 the Malware Detection settings have a Notifications tab. Put the security team's email there to alert them. Malware detection notifications (v12 docs)
Q167 B7
Placing NAS backup data in a SOBR with SSD and dedup extents.
Answer: B
NAS metadata is read and written often, so put it on fast SSD. Bulk data goes to the dedupe appliance to save space. Unstructured Data
Q168 B11
Why each site should have a proxy for replication (second version).
Answer: D
With a proxy at each site, the source proxy compresses data. The target proxy unpacks it. So less data crosses the slow WAN link. Transport Modes
Q169 B11
Redesigning the configuration database so crashes stop costing jobs.
Answer: A
SQL Always On groups keep the config database running if one SQL node fails. The configuration backup tool is the supported way to protect it. App-aware backup of the database is not the way to restore it. v13: v13 defaults to PostgreSQL; check v13 docs for its high-availability options. Transport Modes
Q170 O1
Two data sources Veeam ONE connects to.
Answer: B, C
Veeam ONE connects to vCenter or ESXi, Hyper-V hosts, and VBR servers. Agents are seen through VBR. Cloud VMs are not direct sources. Veeam ONE 13 ports
Q171 B5
Protecting irregularly created templated VMs by tag.
Answer: C
Tags pick up new VMs on their own when they get the tag. Disk settings let you leave out the scratch disk. Application-Aware Processing
Q172 B16 Lab 9
SureBackup ping tests fail on Windows VMs that boot fine.
Answer: D
The VM boots but ping fails. Windows Firewall blocks the ping (ICMP). SureBackup can turn off the firewall for you during the test. SureBackup
Q173 B4
Which role manages MFA for other users.
Answer: B
In v12 only a Veeam Backup Administrator manages users, roles, and MFA settings. v13: v13 adds a Security Administrator role and four-eyes approval for MFA changes. Managing Configuration Database
Q174 B17
Granular restore permissions for the Restore Operator role (second version).
Answer: D
In Enterprise Manager a Restore Operator can be limited to certain restore types. One type is database restore (SQL and Oracle). Veeam Backup Enterprise Manager
Q175 B1
What saved the day after losing the primary data centre.
Answer: B
Backup copy jobs put a second copy of data in another place. That copy survives when the main site is lost. Backup Methods
Q176 B20
Two ways to restore a single Linux file to the same server.
Answer: B, D
For Linux file restore to the original server, Veeam mounts disks on a helper host, or on a temporary helper appliance. A mount server is for Windows. Quick Rollback
Q177 B1
A DR strategy for a newly acquired company.
Answer: A
CDP replication sends data to a DR site with a very low RPO. That meets the DR needs. The other options miss RPO, RTO, or are not DR to another site. Backup Methods
Q178 B5
Why a new SQL database's backup was not consistent.
Answer: C
Point-in-time SQL restore needs log backups. Turn on app-aware processing and set SQL log backups to the needed interval. Application-Aware Processing
Q179 B9
Copying Site A backups offsite with long retention (pruning version).
Answer: C
62 daily points cover two months. 26 weekly GFS points cover six months. Periodic mode copies only the latest point per run, so it uses less space. Backup Copy
Q180 B19
Three targets for Instant Recovery of a VMware VM.
Answer: C, E, F
Disputed key. The bank keys CEF; the documentation supports ACF. In v12, a VMware backup can be instantly recovered to vSphere, Hyper-V, or Nutanix AHV. Instant Recovery to Azure did not exist in v12. Azure had only direct restore. v13: v13 adds Instant Recovery to Microsoft Azure, so E is also valid in v13. Veeam documentation
Q181 B17
What SAML for Enterprise Manager needs.
Answer: A, B, C
Disputed key. The bank keys ABC; the documentation supports AB. SAML needs an identity provider set up and a user or group added in Enterprise Manager. Any SAML 2.0 provider works. Entra ID admin rights are not required. Veeam Backup Enterprise Manager
Q182 B1
Two critical apps that can't lose more than four hours (second version).
Answer: D
Hourly replication gives about one hour of data loss. Starting a replica is fast, well under four hours. Backup Methods
Q183 B6
Agents already installed on EC2 and Azure servers: which protection group.
Answer: A
A cloud machines protection group finds AWS and Azure machines through the cloud API. It adds or removes them on its own. Protection Groups
Q184 B14
Retention plus capacity and archive tiers to meet a GFS policy.
Answer: D
Disputed key. The bank keys D; the documentation supports A. Copy mode puts every point in S3. Move mode after 14 days frees local disk. Archive tier only moves GFS points from the capacity tier, so local disk would still hold 30 days. Scale-Out Backup Repositories
Q185 B16
Finding credit card numbers in backups during SureBackup.
Answer: C
Disputed key. The bank keys C; the documentation supports B. YARA rules match text patterns, so they can find data like credit card numbers. Security & Compliance Analyzer only checks Veeam's own settings. Veeam documentation
Q186 B11
Backing up VMs in Data Center B from a backup server in A.
Answer: A
Proxies in Data Center B sit next to the VMs and the repository. Data never crosses the slow link. Transport Modes
Q187 B11
Why installing with a SQL 2008 database server fails.
Answer: A
VBR 12 does not support SQL Server 2008. It needs a newer SQL version or PostgreSQL. Windows 2019 is fine. v13: v13 uses PostgreSQL by default; check v13 system requirements for supported SQL versions. Transport Modes
Q188 O2 Lab 10
Where Veeam ONE shows VMware datastore capacity (second version).
Answer: B
In Veeam ONE, Infrastructure View shows datastores with their capacity and free space. Veeam ONE 13 ports
Q189 O3
A quarterly capacity report for a director.
Answer: C
Veeam ONE Web Client runs capacity planning reports. You can schedule them, for example each quarter. Veeam ONE 13 ports
Q190 B3
A valid service from a Veeam Cloud Service Provider.
Answer: D
A VCSP can host replicas through Cloud Connect. The provider gives compute and storage (hardware plans) to run them. System Requirements
Q191 B5
The component that does file indexing for a vSphere Windows VM.
Answer: A
The guest interaction proxy deploys the runtime inside the Windows VM. The runtime does indexing and other guest tasks. Application-Aware Processing
Q192 B1
The definition of RTO.
Answer: D
RTO is the longest time a system can be down after a failure. Backup Methods
Q193 B1
A company can lose at most 15 minutes of data on its ERP database, and the database must be running again within 30 minutes. Which value is the RPO?
Answer: B
RPO is the maximum acceptable data loss (15 minutes). The 30 minutes is the RTO. Backup Methods
Q194 B11 Lab 1
A proxy is a physical Windows server with FC access to the VMFS LUNs. Which transport mode will it use first in automatic mode?
Answer: C
Automatic mode prefers Direct storage access first. A physical server can never use Virtual appliance (HotAdd). Transport Modes
Q195 B11 Lab 1
Which port must be open from a proxy to ESXi hosts for Network (NBD) transport mode?
Answer: B
NBD/NFC traffic uses TCP 902 on the ESXi host. Transport Modes
Q196 B11
Which port does the Veeam Data Mover Service listen on?
Answer: B
6162 is the Data Mover (Transport) Service. 6160 is the Installer Service. Transport Modes
Q197 B11
In VBR v13, which port does the backup console use to connect to the backup server?
Answer: C
v13 moved console and web UI traffic to 443. 9392 was the v12 console port. 10443 is appliance Host Management. Transport Modes
Q198 B1
Which part of the 3-2-1-1-0 rule does SureBackup satisfy?
Answer: C
The final 0 means zero errors after recovery verification, which is what SureBackup automates. Backup Methods
Q199 B11 Lab 1
A proxy VM is configured for Virtual appliance mode but cannot see the datastore of one VM. With default settings, what happens?
Answer: B
'Failover to network mode if primary mode fails' is on by default. Transport Modes
Q200 B10 Lab 2
What is the minimum immutability period you can set on a hardened repository?
Answer: C
7 to 9999 days. Hardened Repository
Q201 B10 Lab 2
Which backup method can you use with a hardened repository?
Answer: C
Reverse incremental and forever forward incremental both rewrite the full backup file, so they cannot work with immutable files. Hardened Repository
Q202 B10 Lab 2
Why are single-use credentials used when adding a hardened repository?
Answer: B
Used once to deploy the Data Mover, then discarded. A compromised backup server cannot reach the repository with them. Hardened Repository
Q203 B14 Lab 5
A SOBR capacity tier uses the move policy, but no data ever moves to object storage. The job is forever forward incremental. Why?
Answer: B
Forever forward incremental keeps one active chain that never seals, so there is nothing eligible to move. Scale-Out Backup Repositories
Q204 B14 Lab 5
Which SOBR placement policy stores full and incremental files of a chain on the same extent?
Answer: B
Data locality keeps a chain together. Performance splits fulls and increments across extents. Scale-Out Backup Repositories
Q205 B4 Lab 3
A configuration backup is restored on a new server, but every stored password is missing. What was most likely not done?
Answer: A
Credentials are included only in encrypted configuration backups. Managing Configuration Database
Q206 B11
Which v13 feature lets two backup servers run as an active/passive pair?
Answer: B
HA requires the VSA (13.0.1+) and the Veeam Data Platform Premium edition. Transport Modes
Q207 B11
Which component must exist at both sites to use WAN acceleration?
Answer: C
WAN acceleration needs a source and a target WAN accelerator. Transport Modes
Q208 B8
Which backup method creates 3x I/O on the repository for every changed block during the backup?
Answer: B
Reverse incremental reads the old block, writes it to the .vrb, and writes the new block into the .vbk. Backup Methods
Q209 B8
The customer wants the most recent restore point to always be a full backup file. Which method fits?
Answer: C
Only reverse incremental keeps the .vbk as the newest point. Backup Methods
Q210 B8
Which operation creates a new full backup without reading from the production VM?
Answer: B
A synthetic full is built from restore points already on the repository. Backup Methods
Q211 B12
What is the minimum RPO you can set in a CDP policy?
Answer: B
Minimum 2 seconds. Veeam recommends 15 seconds or more. Maximum 60 minutes. Replica Seeding and Mapping
Q212 B9 Lab 4
Where does a backup copy job read its data from?
Answer: C
Backup copy jobs read restore points from backup files, never from production. Backup Copy
Q213 B21 Lab 8
You fail over to a replica to test it, then want to go back with no changes kept. Which operation?
Answer: C
Undo failover powers off the replica and discards changes made during failover. Failover Plans
Q214 B5
Without application-aware processing, what kind of backup does a running SQL Server VM get?
Answer: B
Without VSS quiescing, the image is crash-consistent. Application-Aware Processing
Q215 B7
In NAS backup, what does the cache repository store?
Answer: B
It keeps metadata so later runs find changed files fast. Unstructured Data
Q216 B12
Which vSphere feature does Veeam CDP use to capture writes?
Answer: C
The Veeam I/O filter is installed through VAIO on the clusters. Replica Seeding and Mapping
Q217 B6
A laptop fleet should back itself up whenever the laptops are online. What should you create?
Answer: B
Backup policies are agent-managed and suit machines that are not always reachable. Protection Groups
Q218 B20 Lab 6
A VM got a bad Windows update. Its disks are fine. What is the fastest way to restore the whole VM to its original location?
Answer: B
Quick rollback restores only the changed blocks, using CBT. Quick Rollback
Q219 B21 Lab 7
Which component publishes the backup to ESXi as a datastore during Instant Recovery?
Answer: C
vPower NFS runs on the mount server. Failover Plans
Q220 B21 Lab 7
An Instant Recovery session should become the permanent production VM. What do you do?
Answer: B
Migration (Storage vMotion or Quick Migration) moves the VM onto production storage. Failover Plans
Q221 B5
A user deleted a table at 14:37. You need the database as it was at 14:36. What must have been enabled?
Answer: B
Point-in-time restore needs SQL log backups. Application-Aware Processing
Q222 B16 Lab 9
In a SureBackup job, why put the domain controller in an application group?
Answer: B
Application groups start dependency VMs first and in order. SureBackup
Q223 B16 Lab 9
How do you reach VMs inside a virtual lab from production?
Answer: B
The proxy appliance maps masquerade IPs to the isolated lab VMs. SureBackup
Q224 B19 Lab 6
Which feature scans a backup with antivirus before it is restored?
Answer: A
Secure restore scans the mounted disks first. Secure Restore
Q225 O1 Lab 10
Which port do you open in the browser to reach the Veeam ONE Web Client by default?
Answer: B
1239 is the default website port. Veeam ONE 13 ports
Q226 O1 Lab 10
Which component, new in Veeam ONE 13, collects data from backup servers?
Answer: B
Veeam Analytics Service is the evolution of the Veeam ONE Agent and uses port 2805. Veeam ONE 13 ports
Q227 O4
Management wants to know how many days remain until a backup repository is full. Which Veeam ONE feature answers this?
Answer: B
Capacity planning projects growth trends to a full date. Veeam ONE deployment projects
Q228 O2 Lab 10
Increment sizes for one job jump to 10x normal overnight. Which alarm is designed for this?
Answer: B
It flags abnormal increment growth, a common sign of encryption. Veeam ONE 13 ports
Q229 O3 Lab 10
You want alarms and reports grouped by department rather than by cluster. What do you configure?
Answer: B
Business View categorizes objects into business groups. Veeam ONE 13 ports
Q230 O2 Lab 10
An alarm should restart a stuck service only after an admin approves it. Which feature?
Answer: B
Remediation actions can run automatically or after approval. Veeam ONE 13 ports
Q231 R2
Which VRO plan type recovers VMs from Veeam backups into vSphere?
Answer: B
Restore plans use backup or backup copy jobs and a recovery location. Recovery Orchestrator onboarding: orchestration plans
Q232 R3
What must exist in VBR before you can create a DataLab in VRO?
Answer: B
A DataLab is a one-to-one overlay of a VBR virtual lab. Recovery Orchestrator onboarding: testing and reports
Q233 R3
Which check quickly confirms a plan matches the DR environment and meets its RPO, without starting VMs?
Answer: B
The readiness check is fast and low-impact. No VMs are started. Recovery Orchestrator onboarding: testing and reports
Q234 R2
Which language do custom plan steps use?
Answer: C
Custom steps are PowerShell scripts. Recovery Orchestrator onboarding: orchestration plans
Q235 R4
An auditor asks for proof that DR was tested last quarter. Which report?
Answer: B
DataLab Test reports record each test run and its results. Recovery Orchestrator onboarding: testing and reports
Q236 R4
A replica plan ran. Production is healthy again and you want to switch back, keeping changes made on the replicas. What is the next step?
Answer: B
Failback syncs changes to production. Commit it once production is confirmed. Recovery Orchestrator onboarding: testing and reports
Every term below is marked in the text above with a dotted underline. Click one anywhere on the page and its definition opens in place, so you never lose your spot. Each entry gives the one-line meaning first and then how it actually works.
These definitions are written from the behaviour the question bank tests and the Veeam documentation linked on each entry. Where a number or a default matters, check it against your v13 build.
How much data you can afford to lose, measured in time.
Looks backwards from the disaster. Backups give hours, replication minutes, CDP seconds.
How long a workload can be down after a failure.
Looks forwards from the disaster. Instant Recovery and replica failover give the shortest.
See also: RPO · Instant Recovery
Three copies, two media, one offsite, one offline or immutable, zero errors.
The offsite copy is usually a backup copy job; the zero is SureBackup.
See also: Backup copy job · SureBackup
The component that reads VM data and sends it to the repository.
Picks a transport mode per disk. Add more proxies when the proxy is the bottleneck.
See also: Transport modes · Guest interaction proxy
How a VMware proxy reads disks: Direct storage, Virtual appliance (HotAdd) or Network (NBD).
Automatic mode tries them in that order and fails over to network by default. NBDSSL encrypts the network path.
See also: Backup proxy
The server that talks to a repository that can't run a data mover.
SMB shares and deduplicating appliances need one. If none is chosen, the backup server takes the role.
See also: Backup proxy
Mounts backups for restores and publishes them over vPower NFS for Instant Recovery.
During Instant Recovery, ESXi sees a datastore served by the mount server.
See also: Instant Recovery
A pair of servers that remove repeated data before it crosses a slow link.
One at the source, one at the target, with a global cache on the target.
See also: Backup copy job
Deploys the runtime into the guest for application-aware processing and indexing.
Used when the backup server can't reach the guest itself.
See also: Application-aware processing
A Linux XFS repository whose backups can't be changed or deleted until their lock expires.
Immutability of 7 to 9999 days. Added with single-use credentials that are never stored.
See also: Immutability · Fast clone
A lock that stops backup files being changed or deleted until a date.
On a hardened repository it's the Linux immutable flag; on object storage, Object Lock.
See also: Hardened repository
ReFS block cloning or XFS reflink, turning synthetic fulls and merges into metadata operations.
Synthetic fulls become quick and take almost no extra space.
See also: Synthetic full
One logical repository built from performance, capacity and archive tiers.
Capacity tier copy or move policies send data to object storage; archive tier takes GFS points.
See also: Capacity tier · Archive tier
The object-storage tier of a SOBR.
Copy sends each new backup at once; Move relocates sealed chains older than N days.
See also: Scale-out Backup Repository · Archive tier
The cheapest SOBR tier, for GFS points in Glacier or Azure Archive.
Azure archiving runs a temporary archiver appliance VM in Azure.
See also: Capacity tier
A SOBR placement policy keeping a whole chain on one extent.
The alternative, Performance, splits fulls and increments across extents.
See also: Scale-out Backup Repository
A job that copies existing backup files to a second repository.
Immediate mode copies every point, including logs; periodic copies the latest per interval. The mode can't be changed later.
See also: 3-2-1-1-0
Grandfather-father-son: weekly, monthly and yearly full points kept beyond short-term retention.
GFS points have their own retention and, on immutable storage, their own lock.
See also: Backup copy job
A full backup built from points already on the repository.
No production read; with fast clone it costs almost nothing.
See also: Fast clone · Reverse incremental
The method where the .vbk is always the newest point and old blocks go to .vrb files.
3 I/O per changed block; deprecated in v13; can't be used on immutable repositories.
See also: Synthetic full
VSS-based quiescing that makes application-consistent backups.
Also enables SQL transaction log and Oracle archive log backup.
See also: Guest interaction proxy
A ready-to-run copy of a VM on a DR host, updated by a replication job.
Seeding or mapping cuts the first run's WAN traffic.
See also: Failover plan · Failback
Replication of every write, for RPOs in seconds.
Uses the Veeam I/O filter through VAIO; minimum RPO 2 seconds.
A group of replicas started in a set order with delays.
Built before a disaster. Afterwards it offers Undo, Start, Edit and Delete.
See also: Replica
Returning from a replica to production, keeping changes made at DR.
Undo failover discards them instead. Planned failover syncs before switching.
See also: Failover plan
Running a VM straight from its backup in minutes.
vPower NFS on the mount server publishes the backup; Migrate to production makes it permanent.
See also: Mount server
An entire VM restore that writes back only changed blocks.
For problems inside the guest, not hardware or storage faults.
See also: Instant Recovery
Restore that runs a script on the machine in a virtual lab first.
Used to delete personal data before the machine reaches production.
See also: Virtual lab
An antivirus scan of the backup before it is restored.
If malware is found you can abort or restore with the network disconnected.
See also: Staged restore
Automated recovery verification of backups in an isolated lab.
Boots VMs, runs heartbeat, ping and application tests, and can scan for malware.
See also: Virtual lab · Application group
An isolated network where SureBackup and staged restore run VMs.
Production reaches it through masquerade IPs on the proxy appliance.
See also: SureBackup
The VMs a SureBackup job starts first, in order, such as the domain controller.
Not used for real failover; that's a failover plan.
See also: SureBackup · Failover plan
A web console over many backup servers.
Central licensing, roles, self-service file restore, and application item restore.
Sending backups and replicas to a service provider over one TLS port.
No VPN needed. The basis of BaaS and DRaaS offers.
Monitoring, alarms and reporting across virtual and backup infrastructure.
Infrastructure View for hypervisors, Data Protection View for backup, Business View for business groups.
Automated, tested DR plans on top of Backup & Replication.
Plans are replica, restore, CDP or storage plans; DataLabs overlay VBR virtual labs.
See also: Virtual lab