Which type of backup captures all files that have changed since the last full backup?

The correct answer is differential backup. A differential backup captures all files that have changed since the last full backup. This type of backup is designed to provide a quicker recovery process compared to an incremental backup, as it includes all changes made since the last full backup rather than just the changes made since the last backup of any kind.

When a differential backup is performed, it accumulates changes over time, meaning that to restore data, you only need the last full backup and the most recent differential backup. This can make recovery simpler and faster as you do not need to sort through multiple incremental backups.

In contrast, an incremental backup only captures the files that have changed since the last backup of any type, whether it be a full or incremental backup. This method may result in faster backup times and use less storage, but can complicate restoration processes, as you would need to restore the last full backup and each incremental backup sequentially. Full backups, on the other hand, capture all data in its entirety and do not rely on previous backups to restore files. A mirror backup is a type of backup that replicates the current state of the source data but does not maintain historical versions of the data, meaning it can overwrite previous backups or changed files.