A security forensics analyst is examining a virtual server. The analyst wants to preserve the present state of the virtual server, including memory contents.
Which of the following backup types should be used?
Correct Answer: A
A snapshot preserves the state and data of a virtual machine at a specific point in time.
The state includes the virtual machine's power state (for example, powered-on, powered-off, suspended).
The data includes all of the files that make up the virtual machine. This includes disks, memory, and other devices, such as virtual network interface cards.
A virtual machine provides several operations for creating and managing snapshots and snapshot chains. These operations let you create snapshots, revert to any snapshot in the chain, and remove snapshots. You can create extensive snapshot trees.