VMCA2022 Question #80: Real Exam Question with Answer & Explanation

Case Study 3, Veeam Financial Services Solution Overview Veeam Financial Services will replace the current backup solution with Veeam Backup & Replication. They plan to protect their virtual infrastructure in New York, San Francisco, London and Singapore. Each branch houses a single physical Windows server that will also need to be backed up. With their stance towards the cloud, Veeam Financial Services would also benefit from any cloud integration where possible. A user portal is also being developed that will enable limited self-service restores for its user base. Business requirements Any backup solution should leverage public cloud storage. Mission-critical applications should not be affected by backup processes. To reduce the workload on the backup management team, every possible way to automate the solution should be used. To meet regulatory requirements, backups must be retained for four years. Veeam Financial Services has plans to develop a self- service portal and integration with the new backup solution is required. Ticket creation in their current help desk system must be automated based on alerts generated. Local privacy and data locality laws must be followed for each branch. Due to the confidential nature of internal financial data, all security features available in backup software should be utilized. Backups should be dynamically scoped to reduce administrative overhead. The backup solution should not require proprietary hardware or storage. Existing technical environment Each site has multiple VMware clusters, including a management cluster, general purpose clusters, application clusters, and Linux/Oracle clusters. Each site has a virtualized stock trading application that has extremely high disk I/O that is very latency sensitive. A custom financial application resides on AIX servers at each site. There is a 2 Gbps link between all major sites. Each branch office has a 100 Mbps connection to the nearest main site. Clustered NAS devices at each primary site house financial transaction and regulatory information, as well as the company's document repository. Each NAS cluster has an average of 100 shares, consisting of NFS 4.1 and SMB 3.0 shares. All traffic routed between LANs must pass through a firewall. Local network bandwidth at each site is 10 Gbps. Each primary site has multiple SQL instances, to include physical, virtual and always-on clusters. Each site has multiple physical and virtual Oracle servers. o Each region has a separate Active Directory with no trusts established in any other region to meet regulatory requirements. Current backup storage is proprietary deduplication appliances that only support the current vendor's software. Each site has 10 production VLANs, one management LAN and three VLANs for physical servers. In North America, there is one VLAN that spans between New York and San Francisco. All virtual machines reside on a combination of SAN storage and NFS datastores. Each location has multiple physical Windows servers that act as file servers. VMware clusters can communicate, but all traffic between them must pass through a firewall. Technical requirements All backups should be completed between 7 p.m. and 7 a.m. local time. o All workloads should be dynamically grouped for ease of administration when creating and maintaining backup jobs. A copy of the backup data should reside in a local public cloud for each region. All backup repositories should be hardened. Any space-saving capabilities within the backup product should be leveraged. Any data transporter should scale horizontally rather than incrementally. The disaster recovery capabilities of the solution shall be utilized in the North American region between New York and San Francisco. Any storage integration shall be implemented in software. An immutable copy of all backups must be stored off-site. Twelve weekly backups, six monthly backups, and seven annual backups must be stored for archival purposes. Oracle backups must be native to Veeam software, with no Oracle administrative plug-ins. All data must be encrypted in flight and at rest. There must be three copies of data, on two different types of media, with one copy off-site that is unalterable or air-gapped. Only non-domain accounts are allowed for vendor components. Depending on regulatory requirements, some data may need to be deleted from backups before a restore can be performed. All backups must be scanned for malware prior to performing a restore. Gold level machines have a recovery time target of 30 minutes and a recovery point target of one hour. Silver level machines have a recovery time objective of six hours and a recovery point objective of 24 hours. Bronze level machines, which consist of development machines and field portables, have a recovery point target of seven days, with no recovery time target set. On-site storage must accommodate three years of projected capacity. All gold and silver machines require backups to be verified. All laptop backups must be managed completely without user interaction. Alternate backup methods should be used for virtual machines that are mission critical and susceptible to stuns While examining the requirements for archived backups, you notice that a copy should go to a cloud provider. Which of the stated requirements needs additional information to help clarify the customer expectation?