VEEAM VMCA2022 Practice Exams
Last updated on Oct 22,2026- Exam Code: VMCA2022
- Exam Name: Veeam Certified Architect 2022
- Certification Provider: VEEAM
- Latest update: Oct 22,2026
In order to improve the likelihood that a ransomware attack on the Veeam infrastructure will not be successful, which of the following should Veeam University Hospital do?
- A . Remove all remote access from Veeam administrators.
- B . Implement a strong password security policy on shared administrative accounts.
- C . Ensure that none of the Veeam components are on the production Active Directory domain.
- D . Protect the Veeam components on the production Active Directory Forest with multi-factor authentication.
D
Explanation:
• MFA is a security method that requires users to provide two or more pieces of evidence to verify their identity, such as a password, a code, a token, or a biometric factor3.
• MFA adds an extra layer of protection against ransomware attacks, as it prevents attackers from accessing the Veeam components even if they manage to steal or guess the passwords of the administrative accounts12.
• MFA also helps to prevent unauthorized changes or deletions of backup data, as well as unauthorized restores or failovers of VMs or applications12.
The other options are not as effective or feasible, as they either do not provide enough security, limit the functionality, or disrupt the integration of the Veeam infrastructure.
References:
1: 6 Best Practices For Ransomware Protection | Veeam
2: Ransomware Prevention Best Practices – Veeam
3: Multi-factor authentication – Wikipedia
Topic 3, Veeam Financial Services
Solution Overview
Veeam Financial Services will replace the current backup solution with Veeam Backup & Replication. They plan to protect their virtual infrastructure in New York, San Francisco, London and Singapore. Each branch houses a single physical Windows server that will also need to be backed up. With their stance towards the cloud, Veeam Financial Services would also benefit from any cloud integration where possible. A user portal is also being developed that will enable limited self-service restores for its user base.
Business requirements
Any backup solution should leverage public cloud storage. Mission-critical applications should not be affected by backup processes. To reduce the workload on the backup management team, every possible way to automate the solution should be used. To meet regulatory requirements, backups must be retained for four years. Veeam Financial Services has plans to develop a self-service portal and integration with the new backup solution is required. Ticket creation in their current help desk system must be automated based on alerts generated. Local privacy and data locality laws must befollowed for each branch. Due to the confidential nature of internal financial data, all security features available in backup software should be utilized. Backups should be dynamically scoped to reduce administrative overhead. The backup solution should not require proprietary hardware or storage.
Existing technical environment
o Each site has multiple VMware clusters, including a management cluster, general purpose clusters,
application clusters, and Linux/Oracle clusters.
o Each site has a virtualized stock trading application that has extremely high disk I/O that is very latency
sensitive.
o A custom financial application resides on AIX servers at each site.
o There is a 2 Gbps link between all major sites.
o Each branch office has a 100 Mbps connection to the nearest main site.
o Clustered NAS devices at each primary site house financial transaction and regulatory information, as well as the company’s document repository.
o Each NAS cluster has an average of 100 shares, consisting of NFS 4.1 and SMB 3.0 shares.
o All traffic routed between LANs must pass through a firewall.
o Local network bandwidth at each site is 10 Gbps.
o Each primary site has multiple SQL instances, to include physical, virtual and always-on clusters.
o Each site has multiple physical and virtual Oracle servers.
o Each region has a separate Active Directory with no trusts established in any other region to meet regulatory requirements.
o Current backup storage is proprietary deduplication appliances that only support the current vendor’s software.
o Each site has 10 production VLANs, one management LAN and three VLANs for physical servers.
o In North America, there is one VLAN that spans between New York and San Francisco.
o All virtual machines reside on a combination of SAN storage and NFS datastores.
o Each location has multiple physical Windows servers that act as file servers.
o VMware clusters can communicate, but all traffic between them must pass through a firewall.
Technical requirements
o All backups should be completed between 7 p.m. and 7 a.m. local time.
o All workloads should be dynamically grouped for ease of administration when creating and maintaining backup jobs.
o A copy of the backup data should reside in a local public cloud for each region.
o All backup repositories should be hardened.
o Any space-saving capabilities within the backup product should be leveraged.
o Any data transporter should scale horizontally rather than incrementally.
o The disaster recovery capabilities of the solution shall be utilized in the North American region between New York and San Francisco.
o Any storage integration shall be implemented in software.
o An immutable copy of all backups must be stored off-site.
o Twelve weekly backups, six monthly backups, and seven annual backups must be stored for archival purposes.
o Oracle backups must be native to Veeam software, with no Oracle administrative plug-ins.
o All data must be encrypted in flight and at rest.
o There must be three copies of data, on two different types of media, with one copy off-site that is unalterable or air-gapped.
o Only non-domain accounts are allowed for vendor components.
o Depending on regulatory requirements, some data may need to be deleted from backups before a restore can be performed.
o All backups must be scanned for malware prior to performing a restore.
o Gold level machines have a recovery time target of 30 minutes and a recovery point target of one hour.
o Silver level machines have a recovery time objective of six hours and a recovery point objective of 24 hours.
o Bronze level machines, which consist of development machines and field portables, have a recovery point target of seven days, with no recovery time target set.
o On-site storage must accommodate three years of projected capacity.
o All gold and silver machines require backups to be verified.
o All laptop backups must be managed completely without user interaction.
o Alternate backup methods should be used for virtual machines that are mission critical and susceptible to stuns
While looking through the requirements regarding database servers, you see that Veeam should manage the database backups and logs.
Which configurations should you check for that are unsupported base on the technical requirements?
- A . Physical windows server with Oracle.
- B . Oracle cluster configurations.
- C . Virtual machines with physical raw device mapping.
- D . Virtual machines with Oracle Automatic Storage Management storage.
A
Explanation:
The configuration that is unsupported by Veeam Plug-in for Oracle RMAN based on the technical requirements is physical windows server with Oracle. Veeam Plug-in for Oracle RMAN only supports Oracle databases running on Linux, Solaris, or AIX operating systems1. The other configurations are supported by either Veeam Plug-in for Oracle RMAN or Veeam Backup & Replication. References: Veeam Plug-in for Oracle RMAN, Oracle | Veeam Backup & Replication Best Practice Guide.
While reviewing the technical requirements for gold tier backups requiring periodic backups every hour, you determine this goes against one of the other requirements and you need to get clarification on which on has priority.
Which of the following does the recovery point objective requirement directly conflict with?
- A . All backups must complete within the hours of 5 p.m. to 8 a.m. local time.
- B . Silver tier backups must be tested to verify recoverability.
- C . Eight weekly backups, three monthly backups and seven yearly backups should be retained for regulatory requirements.
- D . All backups must be copied across site of the current backup window to avoid any backup performance issues.
A
Explanation:
The recovery point objective (RPO) requirement of periodic backups every hour for gold tier virtual machines directly conflicts with the technical requirement of all backups must complete within the hours of 5 p.m. to 8 a.m. local time. This is because these two requirements are mutually exclusive, as hourly backups would need to run during the daytime as well as the nighttime, while the backup window only allows backups to run during the nighttime. Therefore, you need to get clarification from the customer on which requirement has priority and how to adjust the other one accordingly.
Which environmental parameter is affected a possible SureBackup job design? (Choose 2)
- A . Veeam University Hospital has VMware clusters in all locations. For security purposes, each cluster is dedicated to the department that it serves.
- B . Virtual machines are stored on VMware encrypted datastores.
- C . Each site as a 10 GbE link to the public internet, and all traffic between sites routed through these connections via VPN.
- D . The current backups write to NFS storage.
- E . Each site has 20 vLANs in use, with 16 being used for VMware workloads.
B E
Explanation:
To design a solution that meets the SureBackup job design requirements for Veeam University Hospital, you need to consider some of the environmental parameters that may affect the possible SureBackup job design. This will help you to ensure the functionality and reliability of the SureBackup feature, which allows you to verify the recoverability of your backups in an isolated environment.
According to the Veeam Backup & Replication Best Practice Guide, some of the environmental parameters that may affect the possible SureBackup job design are:
• Virtual machines are stored on VMware encrypted datastores. This parameter may affect the possible SureBackup job design because VMware encrypted datastores require special handling and configuration for backup and restore operations. You need to enable encryption support in the backup infrastructure settings, as well as provide the necessary credentials and permissions for accessing the encrypted datastores. You also need to ensure that the virtual lab where the SureBackup jobs run supports encrypted datastores, which may require additional resources and licenses.
• Each site has 20 vLANs in use, with 16 being used for VMware workloads. This parameter may affect the possible SureBackup job design because vLANs require network mapping and routing for backup and restore operations. You need to configure the network settings and rules for the virtual lab where the SureBackup jobs run, as well as for the application group and backup job that are included in the SureBackup job. You also need to ensure that the network isolation and connectivity are maintained and tested for the virtual machines that are verified by the SureBackup job.
During planning, Veeam Financial Services decides to change their backup window from 12 hours to 14 hours.
What can be changed in the design based on this?
- A . Proxies will require more resources.
- B . Mount servers will require fewer resources.
- C . Proxies will require fewer resources.
- D . Repositories will require more storage space.
C
Explanation:
Changing the backup window from 12 hours to 14 hours means that the backup jobs will have more time to complete, and therefore less concurrency will be required. This will reduce the load on the proxies, which are the data movers that perform backup, replication, and restore tasks1. The proxies will need fewer resources, such as CPU and memory, to handle the same amount of data.
The other options are incorrect because:
A) Proxies will not require more resources, as explained above.
B) Mount servers will not require fewer resources, as they are not affected by the backup window. Mount servers are used to mount backup files and restore data from them2. Their resource consumption depends on the restore frequency and performance, not the backup window.
D) Repositories will not require more storage space, as the backup window does not affect the backup size. Repositories are storage locations where the backup files are stored3. Their storage space consumption depends on the amount of data to be backed up, the backup method, the retention policy, and the compression and deduplication settings, not the backup window.
You can find more information about the backup window and the Veeam components in the following resources:
Backup Window
Mount Server
Backup Repository
The customer confirms that their database are Windows based.
What assumption does using the script for the in-house database present?
- A . The script requires environmental variable.
- B . The script requires special privilege escalation on the target application.
- C . The script already exists and is solely managed by the customer.
- D . The script modifies the target virtual machine’s registry.
C
Explanation:
To design a solution that meets the database requirements for Veeam University Hospital, you need to consider some of the assumptions and implications of using the script for the in-house database. This will help you to ensure the consistency and reliability of the database backups and restores, as well as the compatibility and supportability of the script with Veeam products and features.
According to the Veeam Backup & Replication Best Practice Guide, one of the assumptions that using the script for the in-house database presents is C. The script already exists and is solely managed by the customer.
This assumption means that:
• The script is not provided or maintained by Veeam, but by the customer or a third-party vendor. Therefore, Veeam is not responsible for the functionality or quality of the script, nor for any issues or errors that may arise from using it.
• The script is already tested and verified by the customer or a third-party vendor. Therefore, Veeam does not need to validate or certify the script, nor to provide any documentation or guidance on how to use it.
• The script is already integrated and configured with the in-house database. Therefore, Veeam does not need to modify or customize the script, nor to provide any support or troubleshooting for it.
This assumption has some implications for designing a solution with Veeam products and features, such as:
• The customer or a third-party vendor must ensure that the script is compatible and compliant with the latest versions and updates of Veeam Backup & Replication, as well as with the in-house database.
• The customer or a third-party vendor must provide Veeam with the necessary information and access to run the script before and after the backup or restore operations, such as the script location, parameters, credentials, etc.
• The customer or a third-party vendor must monitor and manage the script performance and results, as well as handle any exceptions or failures that may occur during or after the backup orrestore operations.
What components can help meet the following requirement: “Alternative decryption capabilities on encrypted backups must be possible in the event of lost passwords”?
- A . Veeam Backup & Replication’s Configuration Backups
- B . Veeam Backup Enterprise Manager
- C . Veeam Backup & Replication’s Extraction Explorer
- D . Veeam Backup & Replication’s Extract Utility
B
Explanation:
The component that can help meet the requirement of alternative decryption capabilities on encrypted backups in the event of lost passwords is Veeam Backup Enterprise Manager. Veeam Backup Enterprise Manager is a web-based interface that allows centralized management of multiple Veeam backup servers. It also provides a password loss protection feature that enables authorized users to restore encrypted backups without entering passwords if they forget or lose them. This feature requires enabling password loss protection in Veeam Backup Enterprise Manager settings and assigning a security officer role to a user who can approve password recovery requests.
References: [Veeam Backup Enterprise Manager], [Password Loss Protection]
Based on the requirements, what is the recommended storage option for the backups kept on-premises?
- A . Repurposing existing backup storage
- B . Immutable public cloud object storage
- C . Deduplicating storage appliance
- D . Physical server with Veeam Hardened Repository
D
Explanation:
The recommended storage option for the backups kept on-premises is a physical server with Veeam Hardened Repository. A Veeam Hardened Repository is a type of backup repository that provides immutability and ransomware protection for backup files by using Linux XFS file system features and Linux access control mechanisms. A physical server is preferred over a virtual server for better performance, security, and scalability. A Veeam Hardened Repository meets the customer’s requirements for compliance, security, and retention, as well as supports all backup types and features.