CompTIA Security+ (SY0-701)Security ArchitectureEasy
A backup administrator is designing a data protection strategy to ensure recoverability from ransomware, hardware failure, and site disasters. Which strategy best follows industry best practice for backup redundancy?
- AStore two copies of data on the same server using different file systems
- BStore three copies of data, on two different media types, with one copy off-site
- CStore three copies of data on the same storage array using RAID 1
- DStore one copy of data encrypted and replicated across two cloud regions
Show answer & explanationAnswer & explanation
Correct answer: B. Store three copies of data, on two different media types, with one copy off-site
The 3-2-1 backup rule states that organizations should keep at least three copies of data, on two different types of media, with at least one copy stored off-site, protecting against media failure, site disasters, and localized attacks like ransomware.
Why the other options are wrong
- A. Same server storage does not protect against hardware or site failure.
- C. RAID protects against disk failure but not against site-wide disasters.
- D. Only one copy of data does not meet the 3-2-1 redundancy requirement.
3-2-1 Backup Rule
A best-practice backup strategy: 3 copies of data, on 2 different media types, with 1 copy stored off-site.
- Protects against media failure, ransomware, and site disasters.
- Off-site copy can be cloud storage or a remote physical location.
- Different media types reduce risk of a single point of failure.
Memory trick: Three copies, two media, one far away.