VMCE_V12 questions and answers

In the event that the Veeam Backup & Replication configuration database is corrupted, the appropriate action to take is to perform a configuration restore. Veeam Backup & Replication allows you to back up and restore its configuration database. The Restore option should be used to recover the data from a configuration backup. This process will restore the configuration database from the backup file, which includes information about backup jobs, repository settings, and more. Instant Recovery, Failover, and Migrate are not appropriate options for recovering a corrupted configuration database. Instant Recovery is used to quickly restore a VM to a running state, Failover is used for High Availability in case a VM fails, and Migrate is used to move VMs from one host or storage to another.

For deploying the Veeam Agent on Amazon EC2 instances running Windows and Linux operating systems without direct network access from the Veeam Distribution Server, the appropriate type of Protection Group to use is D: Cloud machines. The "Cloud machines" protection group type in Veeam Backup &
Replication is specifically designed for protecting cloud-based workloads, including instances in public cloud environments like Amazon EC2. This protection group type allows the Veeam Agent to be deployed and managed remotely, even when the Veeam Distribution Server cannot directly access the instances over the network. It facilitates centralized management of backup tasks for cloud instances, ensuring that the EC2 instances are adequately protected as per management's request, despite the network accessibility constraints.

Veeam Backup & Replication offers the capability to assign location tags to different components within the backup infrastructure, including vCenter servers. This feature is particularly useful for GDPR compliance, as it allows administrators to specify the physical location of the data processed and stored within vCenter servers, helping to ensure that data sovereignty and regulatory requirements are met.
Veeam Backup & Replication User Guide: Location Tagging for GDPR Compliance Veeam Help Center: GDPR Compliance and Data Location Controls

Placing the backup proxy and cache repository on the same network as the NAS file share helps to increase the performance of the backup job due to reduced latency and higher network speeds. This configuration allows for faster communication and data transfer between the NAS and the backup components, leading to more efficient backup operations.
Veeam Backup & Replication User Guide: Backup Proxy Veeam Best Practices: NAS Backup
Performance

In Veeam ONE, the remaining capacity of each backup repository server can be viewed under the Data Protection View. This section provides detailed information about the storage utilization and remaining capacity of backup repositories, allowing administrators to effectively monitor and manage storage resources. Veeam ONE User Guide, Veeam ONE Data Protection View Documentation

To perform all functions without needing to access the backup server locally or over remote desktop, the engineer can install the Veeam console on their desktop. This allows the engineer to remotely manage and control the Veeam Backup & Replication infrastructure. The console provides full access to the backup server's capabilities from any machine within the network, making it unnecessary to log in directly to the server.

Veeam Backup & Replication User Guide: Veeam Backup & Replication Console Veeam Help Center:
Remote Management with Veeam Backup & Replication Console

In Veeam Backup & Replication, to utilize AWS S3 Glacier for long-term storage, the AWS S3 must first be added as a Capacity Tier within the Scale-Out Backup Repository (SOBR). This step is necessary before backups can be moved to Glacier. Once S3 is established as the Capacity Tier, the policies for moving backups to Glacier can be configured based on the retention requirements (in this case, after 90 days).
This approach ensures that the monthly full backups are initially stored in S3 and then offloaded to Glacier for cost-effective long-term retention.
Veeam Documentation: Scale-Out Backup Repository
Veeam Help Center: AWS S3 as Capacity Tier and Archive Tier Configuration

When moving the Veeam Backup & Replication server and its configuration database to new hardware or servers, the appropriate process to undertake is a configuration restore, denoted by option A: Restore.
This process involves using the Veeam Backup & Replication Configuration Backup utility, which regularly backs up the configuration of the Veeam Backup & Replication server. In the event of a hardware migration or significant system change, this utility allows administrators to restore the server's configuration, including all settings, job configurations, and inventory, onto the new server setup. This ensures a seamless transition with minimal disruption to the backup operations and policies that were previously in place.

The Veeam Plug-in for Oracle RMAN is designed specifically for efficient backup and recovery of Oracle databases. It allows for direct integration with Oracle RMAN (Recovery Manager), ensuring that the backups are consistent and reliable. For a photography company that relies heavily on an Oracle database with new photos being continuously added, this feature provides an ideal solution. The daily backup of the database ensures that all new content is secured regularly, while the 15-minute interval for archived redo logs ensures that any recent transactions are also protected. This approach aligns well with the company's requirement to protect only the database.
Veeam Documentation: Veeam Plug-in for Oracle RMAN Veeam Help Center: Oracle RMAN Backup and Recovery

To ensure that all servers for the accounting department are backed up and any new servers added to the department are automatically included in the protection group, the best approach is to use an Active

Directory (AD) based protection group. Therefore, the correct answer is A: Create an Active Directory based protection group targeted at an Active Directory security group.
By leveraging an AD-based protection group, the Veeam administrator can specify an AD security group that encompasses all user accounts or computer accounts (in this case, servers) associated with the accounting department. As new servers are introduced and added to this AD security group, Veeam Backup & Replication will automatically detect these new members during its periodic rescan (which can be scheduled as per the administrator's preferences) and include them in the protection group. This method not only automates the inclusion of new servers into the backup routine but also simplifies the management of backup policies for dynamically changing environments such as the accounting
department's server infrastructure.

Veeam Enterprise Manager provides centralized management for Veeam Backup & Replication environments. It enables the administrator to manage licensing and role-based access control across multiple Veeam Backup servers in different locations, offering a unified control panel with minimal effort compared to other options that would require more complex setups or custom development work.
Veeam Backup & Replication User Guide: Veeam Enterprise Manager Veeam Help Center: Centralized
Management with Enterprise Manager

Application-aware processing is a feature exclusive to Veeam Agent for Microsoft Windows. It allows for the creation of consistent backups of Windows-based applications and ensures that databases and applications like Microsoft Active Directory, SQL Server, Exchange, and SharePoint are quiesced and in a consistent state when being backed up.
Veeam Agent for Microsoft Windows User Guide: Application-Aware Processing Veeam Help Center: Application-Aware Processing in Veeam Agent for Windows

To meet the 1-hour RPO for the databases within the VM, while only being able to snapshot the VM once per day, the best strategy is to enable regular transaction log backups (option A) and process transaction logs with the job (option E). This setup allows the system to capture changes in the SQL Server transaction logs at intervals less than the RPO requirement, without needing to snapshot the entire VM more frequently.
Veeam Backup & Replication Documentation, Veeam Backup & Replication Best Practices Guide

In Veeam Enterprise Manager, granular restoration permissions can be set for the Restore Operator role, including the restoration of file items. This role allows designated users to perform file-level restores, ensuring that they can recover individual files without having full administrative privileges over the backup infrastructure.

Veeam Enterprise Manager Guide: Roles and Permissions Veeam Help Center: Configuring Granular Restore Permissions

To ensure VMs running interdependent applications fail over one by one, as a group, the method to use is D: Failover plan. In Veeam Backup & Replication, a failover plan allows for the orchestration of a group of replicas to fail over in a predefined sequence. This includes the capability to set up delays between starting each VM, which is crucial for interdependent applications that must be started in a specific order to function correctly. The failover plan ensures that dependencies among the group are respected and that the startup sequence follows the correct order, enabling a smooth and organized transition to the failover state.

To change a backup copy job from periodic mode to immediate mode, an administrator can edit the original backup copy job and select the immediate copy mode from within the job settings. This change ensures that backup copy jobs are started immediately after the source backup job completes, rather than waiting for a defined copy interval.
Veeam Backup & Replication User Guide: Backup Copy Job Veeam Help Center: Backup Copy Job
Modes

The correct approach for backing up Hyper-V VMs to tape in a ransomware protection strategy is to create media pools first and then configure backup to tape jobs. This method ensures organized and efficient tape management while securing VM backups on tape media. Veeam Backup & Replication User Guide, Veeam Tape Backup Configuration Guide