An enterprise administrator configures a server with a RAID 5 disk array to ensure continuous availability in the event of a storage drive failure. Following a ransomware incident that encrypted all files on the volume, the administrator replaces one of the physical hard drives with a new spare disk, expecting the rebuild process to recover the original unencrypted files. Which of the following best explains why this recovery strategy failed?
- RAID provides fault tolerance against hardware failure, but write operations—including file encryption—are immediately calculated across the array, preserving corrupt states.Cevap
- BRAID arrays operate as detective controls that require manual snapshot restoration before drive rebuilds can restore previous data states.
- CRAID 5 arrays only preserve data integrity when combined with a Recovery Time Objective (RTO) configuration of zero.
- DRAID hardware parity mechanisms replace cold backup strategies only when deployed in active-passive dual-datacenter configurations.
Cevap
RAID provides fault tolerance against hardware failure, but write operations—including file encryption—are immediately calculated across the array, preserving corrupt states.
Redundancy mechanisms like RAID 5 are designed to provide fault tolerance against physical hardware failure by spreading data and parity across multiple disks. However, RAID operates at the storage level and processes all write operations immediately. When ransomware encrypts files, those changes are parity-encoded across the array. Rebuilding a drive merely recalculates the existing array state, which includes the encrypted data, demonstrating that fault tolerance is not a replacement for independent point-in-time backups.
Adım Adım Çözüm
Anahtar Kavram
Distinction between Fault Tolerance/Redundancy (RAID) and Data Backups