Which of the following is NOT a recommended backup practice in FOSSE?

• A. Regular full and incremental backups
• B. Offsite or cloud storage
• C. Verification of backups
• D. Keeping backups only on the production server without offsite copies

Answer: (D)

Backups are meant to protect data even when the primary system fails or is compromised. The best practices involve creating regular full and incremental backups to maintain a reliable restore point, storing copies offsite or in the cloud to survive local disasters, and verifying those backups to ensure they can be restored when needed. Keeping backups only on the production server undermines this protection: it creates a single point of failure, so if the production environment is lost or corrupted, there’s no offsite copy to recover from. It also risks inadequate disaster recovery, as local incidents (hardware failure, ransomware, theft, fire, etc.) could wipe out both the live data and the backups. Therefore, this approach is not recommended.