Dell EMC Specialist – Implementation Engineer, PS Series — Question 33

A file server using an SC7020 storage array was impacted by ransomware in the morning and a majority of the files need to be recovered. The backup from the previous night did not run. Is there anything that can be done on the SC7020 array to help recover these files?

Answer options

• A. Yes, if there is a snapshot from before the ransomware on the volume(s) were impacted. Volume(s) can be rolled back to this snapshot.
• B. Nothing can be done on the SC7020 to assist with this recovery.
• C. Yes, if there is a snapshot from before the ransomware on the volume(s) were impacted. A Replay can be created from this snapshot and the files recovered.
• D. Yes, if there is a snapshot from before the ransomware on the volume(s) were impacted. A View volume can be created from this snapshot and the files recovered.

Correct answer: A

Explanation

The correct answer is A because rolling back the volume to a snapshot taken before the ransomware attack can restore the data to its previous state. Options B, C, and D are incorrect as they either state that recovery is impossible or suggest methods (Replay or View volume) that are not applicable for rolling back the entire volume to a previous state.