ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A full backup captures every selected file, and the process resets each file's archive bit. Performing another full backup on Tuesday night means that all data up to that point is contained in a single backup set, enabling a direct restore without first loading Sunday's full set and then additional incremental or differential backups. Relying on incremental or differential backups would require applying multiple backup sets in sequence (Sunday full plus each subsequent incremental, or Sunday full plus Tuesday's differential), increasing total recovery time. Creating and restoring a new full backup on Tuesday consolidates all current data in one operation, minimizing restoration steps and therefore achieving the shortest overall recovery time. The size and duration of that single full backup are outweighed by the time saved during an incident-driven restore.