Comment by alok-g

Any guidelines on how to back up such that the attacker cannot reach (when the hacker otherwise had some valid credentials)?