SSCP Security Operations and Administration Practice Question
Which of the following is a key principle of the 3-2-1 backup rule?
⚠ Common exam trap
The trap here is that candidates often misremember the numbers, confusing the '3' copies with '3' media types or '2' offsite, leading them to select options like A or D that sound plausible but violate the exact 3-2-1 structure.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Three copies on two different media types with one offsite
The 3-2-1 backup rule is a foundational data protection strategy: maintain three copies of your data (one primary and two backups), store them on two different media types (e.g., disk and tape, or local SSD and cloud object storage), and ensure at least one copy is stored offsite to protect against site-level disasters. Option C correctly captures this: three copies, two media types, one offsite.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Two copies on three different media types with one onsite
Why it's wrong here
This reverses the rule's counts: it specifies two copies across three media types, which is internally inconsistent. It is tempting because it retains the three-media and onsite elements, but the 3-2-1 rule requires three copies, on two media types, with one copy offsite.
- ✗
One copy on two different media types with three offsite
Why it's wrong here
This inverts every element, giving one copy on two media types with three offsite. It is tempting because the numbers 1, 2 and 3 all appear, but the 3-2-1 rule requires three copies, two media types, and one offsite copy.
- ✓
Three copies on two different media types with one offsite
Why this is correct
The rule mandates three total copies of data, stored across two distinct media types, with one copy held offsite. That separation protects against simultaneous loss: a single media failure, theft or site disaster cannot destroy every copy at once.
- ✗
Three copies on three different media types with two offsite
Why it's wrong here
This states three copies on three media types with two offsite, altering both the media and offsite counts. It is tempting because three copies is correct, but the rule specifies two media types and only one offsite copy, so the remaining elements are wrong.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.