What are the two types of encryption that NetBackup supports for backup data?

NetBackup's encryption capabilities can be categorized in several ways, all of which are represented in the options.

Location (A): Encryption can occur on the client before data is transmitted or on the media server, typically when writing to a hardware device like a tape drive.

Method (B): NetBackup supports its own software-based encryption (e.g., AES) and can also leverage hardware-based encryption capabilities inherent in storage devices like LTO tape drives.

Cryptographic Principle (C): The underlying technology uses symmetric algorithms (e.g., AES) for high-performance bulk data encryption and asymmetric cryptography for secure key management and exchange.

Since all three options describe valid facets of NetBackup's encryption, "All of the above" is the most comprehensive and correct answer.

A. This option is incomplete. It only describes the location of the encryption process, omitting the method (software/hardware) and the underlying cryptographic principles.

B. This option is incomplete. It only describes the implementation method and fails to account for where encryption occurs (client/server) or the cryptographic types used.

C. This option is incomplete. It only describes the fundamental cryptographic principles used, not the user-selectable features like location or implementation method.

1. Veritas NetBackup™ Security and Encryption Guide

Version 10.2.

Page 18

"About NetBackup encryption": States

"NetBackup provides two methods to encrypt backup data: client encryption and tape drive encryption." This supports options A (Client-side/Media Server-side) and B (Software/Hardware).

Page 19

"About NetBackup client encryption": Mentions

"NetBackup client encryption uses symmetric key cryptography to encrypt and to decrypt backup data. NetBackup supports the Advanced Encryption Standard (AES)..." This directly supports option C.

Chapter 4

"Configuring tape drive encryption": Details the process for using hardware-level encryption on tape devices

supporting the "hardware encryption" part of option B.