Examkin

Question

Difficulty: HardAzure Virtual Machine Backup Configuration

An administrator is configuring the initial backup for an Azure virtual machine named `vm-prod-app01`. The virtual machine is configured as follows:

* Operating System: Red Hat Enterprise Linux 9.4
* Location: West US 3 region
* Disks: One 128 GB128\text{ GB} OS disk (Premium SSD v1), and two 2 TB2\text{ TB} data disks (Premium SSD v2)
* Virtual Network: Associated with a Network Security Group (NSG) that blocks all outbound internet access via a rule at priority 10001000

You have already deployed a Recovery Services Vault named `rsv-backup-prod01` in the West US 3 region.

You need to configure Azure Backup for `vm-prod-app01` to meet these requirements. The solution must follow the principle of least privilege and minimize administrative overhead.

Which configuration should you implement?

  1. Configure the backup using an Enhanced backup policy, and create an outbound NSG rule with a priority of 500500 that allows traffic to the AzureBackup service tag.Answer
  2. B
    Configure the backup using an Enhanced backup policy, and create an outbound NSG rule with a priority of 15001500 that allows traffic to the AzureBackup service tag.
  3. C
    Redeploy the Recovery Services Vault in the West US region to host the backup, and configure the backup using an Enhanced backup policy.
  4. D
    Configure the backup using an Enhanced backup policy, configure a staging storage account in West US 3, and disable 'Allow trusted Microsoft services to access this storage account' on the staging storage account firewall.

Answer

Configure the backup using an Enhanced backup policy, and create an outbound NSG rule with a priority of 500 that allows traffic to the AzureBackup service tag.
The correct answer configuration uses the Enhanced backup policy because Premium SSD v2 disks are only supported with Enhanced policies. It also correctly assigns a priority of 500 to the allow rule, which overrides the existing block rule at priority 1000.

Step-by-Step Solution

1
Analyze the VM disk parameters.
The VM uses Premium SSD v2 disks.
Premium SSD v2 and Ultra Disks require the Enhanced backup policy in Azure Backup; they are not supported by the Standard policy.
2
Analyze regional requirements for the Recovery Services Vault.
The vault must remain in West US 3.
Azure VM backups require the Recovery Services Vault to reside in the same region as the source virtual machine.
3
Evaluate the Network Security Group (NSG) configuration.
An outbound rule with priority 500 allowing the AzureBackup service tag is required.
Because the existing deny rule is at priority 1000, any rule allowing necessary backup traffic must have a lower numerical priority (higher precedence) to take effect.

Key Concept

Azure Virtual Machine Backup Configuration with Enhanced Policies and Network Constraints
Rate this question

Topics

Azure Virtual Machine Backup Configuration

More questions from this topic