SSCP Security Operations and Administration Practice Question
Which TWO of the following are key components of the 3-2-1 backup rule? (Select TWO)
⚠ Common exam trap
The SSCP exam often tests the misconception that the '2' in 3-2-1 refers to two copies of the data rather than two different media types, leading candidates to incorrectly select options like 'All copies on the same media' or to overlook the requirement for media diversity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Two different media types
The 3-2-1 backup rule requires three copies of the data (one primary and two backups), stored on two different media types (e.g., disk and tape, or local disk and cloud storage), with one copy kept offsite. Option D is correct because using two different media types ensures that a failure or vulnerability affecting one medium (e.g., ransomware encrypting a disk array) does not compromise the other copy. This diversity is a core principle of the rule, reducing the risk of simultaneous data loss.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
One copy in the cloud
Why it's wrong here
The rule specifies one copy offsite, not necessarily cloud.
- ✗
Daily full backups
Why it's wrong here
Frequency is not part of the 3-2-1 rule.
- ✗
All copies on the same media
Why it's wrong here
The rule requires two different media types, not all on same.
- ✓
Two different media types
Why this is correct
The '2' in 3-2-1: use two different media types (e.g., disk and tape).
- ✓
Three copies of the data
Why this is correct
The '3' in 3-2-1: keep three copies of data (one primary, two backups).
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.