Secure Restore is a specific Veeam feature designed to prevent the re-introduction of malware into the production environment. During a restore operation, Veeam mounts the machine's disks from the backup file to a mount server. It then initiates a scan of the mounted disks using an installed antivirus application. If malware is detected, the restore can be aborted or completed with the machine's network adapters disabled, effectively isolating the potential threat. This process ensures that the data being restored is clean before it goes live.

A. Proper rights/permissions on files and folders: Restoring file and folder permissions is a standard function of most restore types, not the specific purpose of the Secure Restore feature.
B. Custom ports for in-flight data: This is a general network configuration setting within Veeam for managing data traffic, unrelated to the malware scanning function of Secure Restore.
C. 256-bit AES encryption of in-flight data: This is Veeam's network data encryption feature, which protects data during transit. Secure Restore focuses on the content of the data at rest within the backup, not its transmission.

1. Veeam Backup & Replication V12 User Guide for VMware vSphere

Section: Restore

Subsection: Secure Restore. The guide states

"Secure Restore is a process of scanning a machine from a backup with an antivirus before restoring the machine to the production environment." It further details the process of mounting disks and initiating the antivirus scan.

2. Veeam Backup & Replication V12 User Guide for VMware vSphere

Section: How Secure Restore Works. This section explicitly describes the workflow: "Veeam Backup & Replication mounts machine disks from a backup to a mount server... and triggers an antivirus to scan the mounted file system."