ExpertAZ-305 · Question 34 · Domain 3.1: Backup and Disaster Recovery
Your company recently suffered a ransomware attack on-premises. To prevent this in Azure, the CISO mandates that all Azure VM backups must be protected against malicious deletion.
If an attacker compromises an administrator account and attempts to delete the backup data, the data must be retained for at least 14 days, and the deletion must be reversible. Additionally, you must ensure that no one, not even a global administrator, can disable this protection mechanism.
Which two features should you configure on the Recovery Services vault?
Your company recently suffered a ransomware attack on-premises. To prevent this in Azure, the CISO mandates that all Azure VM backups must be protected against malicious deletion.
If an attacker compromises an administrator account and attempts to delete the backup data, the data must be retained for at least 14 days, and the deletion must be reversible. Additionally, you must ensure that no one, not even a global administrator, can disable this protection mechanism.
Which two features should you configure on the Recovery Services vault?
Answer options:
Soft delete and Multi-user authorization (MUA)
Soft delete and Immutable vault
Resource locks and Azure Policy
Cross Region Restore (CRR) and Soft delete
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 5
55 questions · hints · full answers · grading