Question 1

Your company uses Azure Backup to protect 100 Azure Virtual Machines.

The security team is concerned about ransomware attacks where an attacker might gain administrative access to Azure and maliciously delete the VM backups. You need to design a solution to ensure that even if an administrator deletes a backup, the data can still be recovered for at least 14 days.

Which feature should you enable?

Accepted Answer

Look for 'recover for at least 14 days after deletion'. This is the exact definition of the Soft Delete feature.

Question 2

What mistakes do candidates make on this AZ-305 question?

Accepted Answer

Choosing Resource Locks. While locks prevent deletion, an attacker with admin rights can just delete the lock. Soft delete is enforced at the platform level.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

More questions from this exam