Veeam Certified Architect 2022 VMCA2022 Exam Free Dumps

1. Topic 1, Veeam Life and Indemnity



Executive Summary:

Veeam Life and Indemnity is expanding its existing Veeam backup infrastructure to protect additional virtual machines, physical server and NAS workloads at their Fresno, CA and Carson City, NY data centers.



The original installation and configuration of Veeam software occurred two years ago. Since the installation, the organization has grown, and as a result, the Veeam Infrastructure needs to be resized to accommodate the existing and new workloads.



For the past three months, Veeam Life and Indemnity has noticed that they are having issues with backups completing within the allotted backup window. Only 40% of backup jobs complete successfully, so they have broken the backups into two sets, and they run them on alternating days. They have also stopped all backups for their development environment.



In addition, the original configuration required a daily backup copy job, but to the issue with backups completing, this has been modified to run only on Sundays.



They have also noticed a degradation in storage performance and are having to purchase new storage on a quarterly basis to accommodate data growth.



Solution Concept:

Veeam Life and Indemnity is upgrading Veeam Backup & Replication to the last version. They are also replacing all legacy physical hardware and storage with current generation equipment. Veeam Life and Indemnity wants to be able to ensure that all backups, including production and dev test workloads, can run every night and that all backups complete within the required backup window. In addition, Veeam Life and Indemnity would like to run daily copy jobs to ensure that a copy of all backed up data resides at both physical sites.



Veeam Life and Indemnity has also expressed concern about the threat of ransomware. They have not experienced a data breach of any kind but would like to ensure the ability of recover should one occur.



Existing Technical Environment:

Veeam Life and Indemnity has VMware clusters in all locations.

These clusters are broken into two categories:

general use virtual workloads, and application specific workloads, such as MSSQL and Oracle.

All customer data is subject to government regulation and must be kept secure at all times.

Veeam Life and Indemnity has a proprietary CRM system that must be quiesced prior to backup.

All email is hosted in Office 365.

All database servers are virtualized.

All virtual machines are categorized as either gold, silver, or bronze, with different service-level agreements based on tier.

All backups currently encrypted in flight and at rest.

Internet connectivity at both sites is current 1 Gbps, with plans to increase to 2 Gbps soon.

All field sales reps are assigned a company laptop that runs a CRM client.

The LAN at each location supports up to 40 Gbps bandwidth.

All backups are currently written to Scaled-out Backup Repositories with each extent residing on a CIFS share.

Each department has its own vLAN, with a total of 30 vLANs for production traffic.

A single management vLAN is stretched between sites.

All unstructured data resides either on 10 NFS shares on the company’s incumbent NAS devices, or Windows file servers as file shares.

VMware uses vSAN for VM datastores.

All vLAN must traverse a firewall to communicate, and the backup network itself is no routable.

All network traffic between clusters is required to traverse a firewall.

The firewall devices can support up to 20 Gbps.



Business Requirements:

Due to limited manpower, all backups should be dynamically scope.

All backups must be copied across site outside of the current backup window to avoid any backup performance issues.

Due to the sensitivity of customer data, tier 1 helpdesk personnel must not be able to access these backups.

They should have access to restore non-customer data.

Backup administrators are subject toa rigorous background check and should be the only staff able to perform restores of confidential customer data.

For any legal issues, fast and timely discovery from backup data should be supported.

For security purposes, all storage should be hardened to prevent data breaches.

Remote sales staff should have the ability to start a backup oh their devices.

Due to regulatory requirements, audits must be performed periodically to ensure successful and consistent backups, as well adherence to security policies.



Technical Requirements:

All backups must complete within the hours of 5 p.m. to 8 a.m. local time

Backup copy jobs must successfully complete daily outside of the backup window.

Gold tier virtual machines have a recovery point objective of the one hour for image backup, and 15 minutes for traction log backup, with a recovery time objective of four hours.

Silver tier virtual machines have a recovery point objective of 24 hours, with a recovery time objective of eight hours.

Bronze tier virtual machines have a recovery point objective of seven days, with no defined recovery time objective.

NAS devices and file servers have a recovery point objective of four hours, with no specified recovery time objective.

Eight weekly backup, three monthly backups, and seven yearly backups should be retained for regulatory requirements.

All data must be encrypted in flight and rest.

Alternative decryption capabilities on encrypted backups must be possible in the event of lost passwords.

Role Based Access Control must be used to prevent unauthorized access to backup data.

New storage must be hardened to prevent intrusion, and if possible, the data written must be unchangeable to prevent ransomware attacks.

All backups must be scanned prior to any restore operations for malware.

All gold level systems must have a custom script run before restore to ensure compliance to specific legal statutes.

Gold tier backups must be tested to verify recoverability.

Only silver tier systems should be indexed during backups, with the exception of laptops belonging to the sales field.

All personal files on laptops should be excluded from backup All MSSQL server backups should exclude the H: drive.



In order to improve the likelihood that a ransomware attack on the Veeam infrastructure will not be successful, which of the following should Veeam Life and Indemnity do?

2. Which type of backup job will you need more informacion on to properly plan backup copy job settings later to make sure you are creating the required number of restore point per day offsite?

3. During discovery, it is determined that a group of MSSQL systems are running in an Always-On cluster and sensitive to virtual machine stun.

How should these systems be configured for backups?

4. While going through the discovery data for the NAS environment, you determine several key metrics are missing for later deign and sizing.

Which of the following should you collect from the customer about the data stored on the on the NAS per site? (Choose 3)

5. When deciding on the design of the primary backup repository, which option best fits the requirements in the case study?

6. Looking at the existing error, you suspect that most of the issues could be resolved with different repositories. Assuming the repositories will be able to accomplish much higher throughput, what new issue might come up?

7. While reviewing the technical requirements for gold tier backups requiring periodic backups every hour, you determine this goes against one of the other requirements and you need to get clarification on which on has priority.

Which of the following does the recovery point objective requirement directly conflict with?

8. Based on the customer’s security requirements around restore capabilities, which components should be deployed?

9. What information related to the virtual infrastructure is missing and must be collected during the discovery phase) (Choose 2)

10. The customer has stated that they plan on purchasing new physical server component and repository storage.

What additional information is needed to define the implementation process later?

11. Based on the customer’s hardening requirements, what steps should be taken to correct the storage configuration?

12. Based on customer recovery requirements, which component will help them meet their stated objectives?

13. What assumption can be made for the conceptual design?

14. Based on additional discovery, it was determined that a few critical workloads need to maintain a less than five-minute recovery point objective.

Which of the following would be the recommended method to replicate VMware virtual machines?

15. What information related to sizing the NAS infrastructure is missing and must be collected during the discovery? (Choose 2)

16. Which of the following areas would benefit from additional analysis on areas mentioned in the case study? (Choose 3)

17. The decision has been made to separate out proxies for gold tier and silver/bronze tier.

Which reason below justifies the decision?

18. The customer has expressed concerns based on their technical requirements regarding the gold tier virtual machines and the recoverability of backup files.

How can the recoverability testing be accomplished to meet the customer’s requirements?

19. During Veeam deployment, Veeam Life and Indemnity has determined that the latency encountered during backup of the virtualized MSSQL Server database running on vSAN is too high.

What is the recommended step Veeam Life and Indemnity can take to improve this?

20. What information is missing form discovery?

21. The customer states that Veeam Backup & Replication is on the production domain.

What direct risks does this present?

22. Gold tier virtual machines have a recovery point objective of one hour for image backup.

Which transport mode could you use during the redesign? (Choose 2)

23. To demonstrate SLA compliance during audits and protection against exposure to personally identifiable information, which configuration would verify this is possible in the event of exposure?

24. The company has committed to providing the numbers for source in-use data for gold tier virtual machines.

In order to attempt to collect metrics for hourly gold tier backups, which of the following additional metrics are need for proxy sizing?

25. Based on the requirements, what is the recommended storage option for the backups kept on-premises?

26. What can be done to validate that the design meets target SLAs and does not exceed repository growthprotections?

27. In addition to scanning all backup for malware before restoring, what additional Veeam capabilities must be included in the conceptual design for gold level systems? (Choose 2)

28. Based on Customer requirements, how should virtual machine backups be scoped? (Choose 2)

29. You are examining the requirement: “If possible, the data written must be unchangeable to prevent ransomware attacks.”

Which types of jobs do not support using immutability from S3 Object Lock or hardened repositories? (Choose two)

30. Assuming that you put the backup repositories in the backup network only, what possible issue could arise?

31. What components can help meet the following requirement: “Alternative decryption capabilities on encrypted backups must be possible in the event of lost passwords”?

32. During architecture planning, Veeam Life and Indemnity decides that recovery point objective of gold tier machines should change from one hour to three hours with daily retention set to seven days.

What will be impact on the Veeam design?

33. Considering the security, throughput, and retention requirements, what would be part of an acceptable backup repository design? (Choose 2)