Which of the following is a best practice for securing backup data in an enterprise environment?

Encrypting backups and storing them in a separate location is a fundamental best practice for securing data in an enterprise environment. Encryption ensures that even if the backup is compromised, the data cannot be accessed without the decryption key. Storing backups offsite or in a separate location from the primary data ensures that the data is safe in case of physical disasters such as fire, theft, or hardware failure. This practice is essential to ensure business continuity and data recovery in case of any unexpected events. Option A (Storing backups on the same physical server as production data) is incorrect because storing backups on the same server as production data defeats the purpose of disaster recovery if that server fails. Option B (Using unencrypted USB drives for offsite storage) is incorrect because unencrypted backups can be easily accessed by unauthorized parties if lost or stolen. Option D (Scheduling backups during peak business hours) is incorrect because scheduling backups during peak hours may reduce system performance and affect business operations. Option E (Performing backups only when critical data is lost) is incorrect because backups should be performed regularly, not just in emergencies, to ensure the availability of recent data for recovery.