Which will check just the header unless your backup is done with checksum. If your backup was done with checksum then verify only will redo the checksum validation and check the header. But, it doesn't check all of the header, so you can still have a bad backup after running checksum and verifyonly. The only way to ensure you have a good backup is to run a restore.