Question

Difficulty: MediumAzure Virtual Machine Backup Configuration

An administrator is configuring Azure Backup for a new virtual machine named vm-shipping-prod in the West Europe region. The virtual machine has standard network configurations and uses managed disks.

Which of the following configuration requirements must be met to ensure the backup job completes successfully? (Select two.)

  1. The Recovery Services Vault must be located in the West Europe region.Answer
  2. The network security group (NSG) associated with the virtual machine must allow outbound traffic to the AzureBackup service tag.Answer
  3. C
    The Recovery Services Vault must be located in the North Europe region to support cross-region restore (CRR).
  4. D
    You must create a Microsoft Entra ID dynamic device group and assign the VM Backup Contributor role to the group.

Answer

The Recovery Services Vault must be located in the West Europe region, and the network security group (NSG) associated with the virtual machine must allow outbound traffic to the AzureBackup service tag.
To successfully back up vm-shipping-prod, the Recovery Services Vault must be deployed in the same region (West Europe). Furthermore, the VM requires outbound network access to the Azure Backup service, which is commonly allowed by configuring NSG rules targeting the AzureBackup service tag.

Step-by-Step Solution

1
Determine the required region for the Recovery Services Vault.
The vault must be created in West Europe, matching the region of the virtual machine vm-shipping-prod.
Azure Backup enforces a region boundary; a Recovery Services Vault cannot protect virtual machines situated in a different Azure region.
2
Evaluate network connectivity requirements for virtual machine backup agents and extensions.
Ensure outbound connectivity is allowed to the AzureBackup service tag via NSG rules.
The backup agent running inside the VM must communicate with the Azure Backup service to coordinate snapshot capture and data transfer.

Key Concept

Successful Azure VM backup configuration requires locating the Recovery Services Vault in the same region as the target virtual machine and ensuring the VM possesses outbound network connectivity to the Azure Backup service endpoints.
Rate this question