Question 1

Your company recently suffered a ransomware attack on-premises. To prevent this in Azure, the CISO mandates that all Azure VM backups must be protected against malicious deletion.

If an attacker compromises an administrator account and attempts to delete the backup data, the data must be retained for at least 14 days, and the deletion must be reversible. Additionally, you must ensure that no one, not even a global administrator, can disable this protection mechanism.

Which two features should you configure on the Recovery Services vault?

Accepted Answer

Identify the feature that retains deleted data (Soft delete) and the feature that locks the vault settings permanently (Immutable vault).

Question 2

What mistakes do candidates make on this AZ-305 question?

Accepted Answer

Relying on Resource Locks. A compromised administrator can simply delete the resource lock and then delete the vault.

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 5

More questions from this exam