Examkin

Question

Difficulty: Very hardRecovery Services Vaults and Backup Vaults

An organization has deployed several resources across two Azure regions to support a distributed application. The current resource topology is configured as follows:

Resource NameResource TypeAzure RegionResource Group
`vm-frontend`Virtual machineNorth Europe`rg-prod-ne`
`disk-frontend-data`Managed diskNorth Europe`rg-prod-ne`
`rsv-prod-ne`Recovery Services vaultNorth Europe`rg-prod-ne`
`stg-ne-files`Storage account (File Share)North Europe`rg-data-ne`
`vm-backend`Virtual machineWest Europe`rg-prod-we`
`bv-prod-we`Backup vaultWest Europe`rg-prod-we`
`db-postgres-we`Azure Database for PostgreSQLWest Europe`rg-data-we`

You need to configure backup for these resources. Which backup configuration is supported and will complete successfully?

  1. A
    Back up the virtual machine `vm-backend` to the Recovery Services vault `rsv-prod-ne` by enabling Cross-Region Restore (CRR).
  2. B
    Back up the managed disk `disk-frontend-data` to the Recovery Services vault `rsv-prod-ne` by assigning the Storage Blob Data Contributor role to the vault's managed identity.
  3. Back up the virtual machine `vm-frontend` to the Recovery Services vault `rsv-prod-ne`.Answer
  4. D
    Back up the Azure file share in `stg-ne-files` to the Recovery Services vault `rsv-prod-ne` while the storage account firewall is set to 'Enabled from selected networks' and the 'Allow trusted Microsoft services' exception is disabled.

Answer

Back up the virtual machine `vm-frontend` to the Recovery Services vault `rsv-prod-ne`.
The correct configuration is to back up the virtual machine `vm-frontend` to the Recovery Services vault `rsv-prod-ne` because both resources are in the North Europe region, and Recovery Services Vaults are the designated vault type for Azure Virtual Machine backups.

Step-by-Step Solution

1
Analyze regional requirements for Azure Virtual Machine backups.
A virtual machine can only be backed up to a Recovery Services Vault that resides in the same region. `vm-frontend` and `rsv-prod-ne` are both in North Europe, which meets the regional constraint. `vm-backend` is in West Europe and cannot be backed up to `rsv-prod-ne` even if Cross-Region Restore is enabled, as CRR only governs the restore target, not the backup source.
Ensures that the initial backup copy is written locally to maintain performance and lower latency.
2
Determine the support matrix for Recovery Services Vaults versus Backup Vaults.
Azure Managed Disks can only be backed up to Backup Vaults. They are not supported by Recovery Services Vaults. Therefore, backing up `disk-frontend-data` to `rsv-prod-ne` is invalid regardless of RBAC permissions.
Separates legacy and VM-centric backup workloads (Recovery Services Vaults) from newer cloud-native workload types (Backup Vaults).
3
Evaluate network access requirements for backing up Azure File Shares.
Azure File Share backup is supported by Recovery Services Vaults in the same region. However, if the storage account hosting the file share (`stg-ne-files`) restricts network access via a firewall, the 'Allow trusted Microsoft services' exception must be checked. If disabled, the backup fails due to network authorization blocking.
Ensures that the internal Azure Backup service has data-plane access to mount the share and capture the snapshot.

Key Concept

Identifying regional constraints, vault capability matrices (Recovery Services Vault vs. Backup Vault), and storage firewall bypass configurations in Azure Backup.
Estimated Time:3m 0s
Rate this question

Topics

Recovery Services Vaults and Backup Vaults

More questions from this topic