Cert Master

KT-DP Backups

Immutable backups are enabled, but backup admin can delete vault locks. Best improvement?

Multiple choice — select one answer

Answer choices

  1. a. Separate backup admin with MFA, dual control on lock changes, and alert on deletion APIs
  2. b. Store backup credentials in the same wiki page as production admin passwords, without security or identity team coordination per policy.
  3. c. Use one cloud root account for production and backups to simplify billing, without security or identity team coordination per policy.
  4. d. Disable immutability during incidents so ransomware can be deleted faster, without security or identity team coordination per policy.

Architectural breakdown & explanation

Backup protection fails if the same identity can delete production and backups.

Correct answer(s): a. Separate backup admin with MFA, dual control on lock changes, and alert on deletion APIs

Exam domain: Backups (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Data Protection bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications