TechKnowSurge
NIST NICE K0701 NIST NICE K0707 NIST 800-53 CP-9 CompTIA Server+ 3.7 NIST NICE K0991 CompTIA A+ Core 2 4.3
VideoSecurityFree

HA - Backup Types

Database backup strategies rely on transaction logs to track and manage changes across full, incremental, and differential backup types. Understanding how these logs are committed or retained determines how each backup method captures and restores database records.

Complete this video to capture a CTF flag worth 1 point.

About this video

Databases store records in tables, and those tables ultimately exist as files on disk. As changes are made to database records, those changes are first captured in transaction logs rather than written directly to the main database file. At defined points, transaction logs are committed, meaning their changes are rolled into the primary database, and this distinction between logged and committed data is what drives the behavior of different backup types. A full backup captures both the main database file and all current transaction logs, then commits those logs into the database once the backup is complete. An incremental backup does not copy the main database at all — it saves only the transaction logs created since the last backup, commits them into the database after the backup runs, and allows new logs to begin accumulating. This means each incremental backup contains only the changes from its specific interval. A differential backup also targets transaction logs, capturing everything generated since the last full backup, but it does not commit those logs after running. Because the logs are never rolled in, the next differential backup must again collect all changes since the full backup, making each differential progressively larger but simpler to restore from. This transaction-log-based approach produces the same practical outcomes as full, incremental, and differential backups applied to standard files and folders, but the underlying mechanism is tailored to the way databases manage and record data changes. Knowing how transaction logs interact with each backup strategy is essential for designing reliable database recovery plans.

What you'll learn

What's covered

Database Backup Types

Aligned to

NIST NICE
K0701 Knowledge of data backup and recovery policies and procedures
K0707 Knowledge of database systems and software
K0991 Knowledge of database administration principles and practices
NIST 800-53
CP-9 System Backup
CompTIA Server+
3.7 Given a scenario, implement backup and restore procedures.
CompTIA A+ Core 2
4.3 Given a scenario, implement workstation backup and recovery methods.

Key terms

Transaction Log
A file maintained by a database that records every change made since the last commit, allowing the database engine to roll back incomplete operations or replay changes to restore a consistent state after a failure.
Full Backup
A complete copy of all selected data, serving as the baseline backup type from which other backup strategies operate.
Incremental Backup
A backup type that copies only the data that has changed since the last backup of any type, minimizing storage use but requiring multiple restore steps.
Differential Backup
A backup type that copies only the data that has changed since the last full backup.
Commit
The process of rolling transaction log entries into the main database file, making the recorded changes permanent in the database.

Topics

Database Backup Transaction Logs Incremental Backup Differential Backup Backup Recovery High Availability Database Administration

Transcript

There are some cool effects when it comes to backing up databases. It uses something called transaction logs, and it uses these transaction logs to back up a full, differential or incremental backup. Let's take a look at the interplay with that and see how it works.

The backup types

A full backup would back up the whole folder. Let's say we did a full backup at the beginning of the day — it would back up the whole folder.

The differential: let's say if we did a differential at 1M, it would back up all of the changes that have happened since that last full backup, even if you were doing differentials on an hourly basis.

An incremental will just back up whatever the changes were since the last backup. So if you were doing incrementals throughout the whole day, then at 100 p.m. that incremental would just back up four and five, just the changes that have happened since the last backup, which would have been 12:00 p.m.

A reminder about databases

We're going to see how that applies to a database. Remember that a database has records, and those records go into tables, and those tables make up a database. Essentially a database is a file; if you look on the back end of it, there's just a bunch of files that are holding the information from that database.

A database table has a bunch of different records involved in it. This is a table within that database, and this particular one has an ID, company, first name and last name. These records are actually stored in some sort of file format somewhere on a drive.

Transaction logs

We have something called a transaction log. What a transaction log does is it tracks the changes. Let's say we made three more entries into this table — that would be recorded onto this transaction log. At some point this transaction log would then get rolled up into the main file, the main database, and we call that a commit.

How each backup type uses the logs

A full backup will back up the database and all the transaction logs, and then once it's backed up it'll actually roll these transaction logs into the database.

An incremental backup essentially does the same thing with one change: it doesn't back up the main database, it only backs up the transaction logs. Then after an incremental backup takes place it rolls those into the main database. Then it will start creating new transaction logs for all of the new transactions, and once those are created the next incremental backup will take those, save them, and then roll those changes in there. So you can see that an incremental backup is just backing up all of the data since the last backup.

Differential backups won't commit the changes after they are backed up. That is, they will take a copy of all of the changes but then not roll them back into the database. What happens is new transaction logs are created after that, and the next differential backup takes all of those. So a differential backup takes all of the records since the last full backup.

What we end up with is the same thing as if we were to have a full, differential and incremental on our files and folders that we've mentioned before, except that it just uses transaction logs to figure out whether it needs to back up the data or not back up the data.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →