hardMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: An organization's backup strategy includes daily…
An organization's backup strategy includes daily full backups and hourly incremental backups. During a restoration, they discover that a critical file was corrupted 6 hours ago. Which backup set is required for the restoration?
⚠ Common exam trap
ISC2 often tests the misconception that only the most recent incremental backup is needed, or that all increments since the full backup are required, when in fact the correct set is determined by the specific point in time to which you are restoring.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The most recent full backup plus the incremental backups from the last 6 hours.
Restoring a file that was corrupted 6 hours ago requires the most recent full backup as the base, plus all incremental backups taken in the last 6 hours. Incremental backups only store changes since the last backup (full or incremental), so to reconstruct the file as it existed 6 hours ago, you need the full backup and every incremental backup from that point forward until the corruption time. Without all those increments, the file state cannot be fully reconstructed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The most recent incremental backup only.
Why it's wrong here
Incremental backups alone are not sufficient without the full backup.
- ✗
The most recent full backup only.
Why it's wrong here
Full backup alone would restore an older version of the file.
- ✓
The most recent full backup plus the incremental backups from the last 6 hours.
Why this is correct
Restores the state just before corruption.
- ✗
The most recent full backup plus all incremental backups since.
Why it's wrong here
Includes increments after corruption, reintroducing the corrupted file.
Go deeper
Related to this question
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.