Exam SY0-601 topic 1 question 76 discussion

A snapshot preserves the state and data of a virtual machine at a specific point in time. The state includes the virtual machine’s power state (for example, powered-on, powered-off, suspended). The data includes all of the files that make up the virtual machine. This includes disks, memory, and other devices, such as virtual network interface cards. A virtual machine provides several operations for creating and managing snapshots and snapshot chains. These operations let you create snapshots, revert to any snapshot in the chain, and remove snapshots. You can create extensive snapshot trees.

A snapshot provides you with a copy of a VM at a moment in time, which you can use as a backup. You are still able to use the VM just as you normally would. However, after taking a snapshot, the hypervisor keeps a record of all changes to the VM. If the VM develops a problem, you can revert the VM to the state it was in when you took the snapshot. Administrators commonly take snapshots of systems prior to performing any risky operation. Risky operations include applying patches or updates, testing security controls, and installing new applications. Ideally, these operations do not cause any problems, but occasionally they do. By creating snapshots before these operations, administrators can easily revert or roll back the system to a known good state with a known good configuration.

A. Snapshot

A snapshot backup is the appropriate type to use when the security forensics analyst wants to preserve the present state of the virtual server, including memory contents. A snapshot is a point-in-time copy of the virtual machine (VM) that captures its entire state, including its memory. This allows for the virtual server to be restored to the exact state it was in when the snapshot was taken, including any volatile data present in memory at that moment. For the purpose of preserving the present state of the virtual server, including memory contents, a snapshot backup is the most appropriate choice.

A snapshot is a point-in-time copy of a virtual machine's disk file, including its memory state. It captures the entire state of the virtual server at a specific moment, including the memory contents, disk contents, and configuration settings. This allows for the preservation of the virtual server's current state, which can be useful for forensic analysis, system recovery, or other purposes.

FULL backup will store everything on it.

Answer is A, a good practical of this is to download oracle VM set up a virtual machine and in software there is an option to "snapshot" current device

present state is the keyword in this case so snapshot will do the job

A VM snapshot file consists of all the files stored on the storage devices of a virtual machine. Taking a snapshot creates files with extensions .vmdk, -delta.vmdk, .vmsd, and .vmsn, which are stored with the VM base files. A memory snapshot also includes a memory state file (with extension .vmsn) that holds the memory of the VM at the time of the snapshot capture. The size of the memory file and the time it takes to capture the memory state depends on the configured maximum memory for the original/parent VM.

per dion training notes: Type of backup primarily used to capture the entire operating system image including all applications and data § Snapshots are also commonly used with virtualized systems

Agree with A snapshot being the correct answer here