Question

Difficulty: Very hardRecovery Services Vaults and Backup Vaults

An enterprise administrator is designing a backup strategy for several workloads deployed within a single subscription. The resources are distributed as follows:

* East US Region:
* An Azure Virtual Machine named `VM-East-Prod` with an attached managed OS disk named `Disk-OS-East`
* A storage account named `saeastfiles` hosting legacy application file shares
* A Recovery Services Vault named `RSV-East-02` configured with Locally Redundant Storage (LRS)

* West US Region:
* A Recovery Services Vault named `RSV-West-02` configured with Geo-Redundant Storage (GRS) and Cross-Region Restore (CRR) enabled

The administrator needs to implement the following backup requirements:
1. Protect the entire `VM-East-Prod` virtual machine.
2. Back up `Disk-OS-East` independently of the virtual machine lifecycle to retain dedicated disk snapshots.
3. Protect the file shares hosted in `saeastfiles`.

Which two actions should the administrator perform to achieve these goals?

  1. Configure the backup of VM-East-Prod using RSV-East-02.Answer
  2. Create a Backup Vault in the East US region and configure a backup policy for Disk-OS-East.Answer
  3. C
    Configure the backup of VM-East-Prod using RSV-West-02.
  4. D
    Configure the backup of the file shares in saeastfiles using RSV-West-02.
  5. E
    Create a Backup Vault in the East US region, assign the Storage Blob Data Contributor role to the vault's managed identity, and configure a backup policy for the file shares in saeastfiles.

Answer

Configure the backup of VM-East-Prod using RSV-East-02, and create a Backup Vault in the East US region to configure a backup policy for Disk-OS-East.
The correct options state that VM-East-Prod should be backed up using RSV-East-02, and a Backup Vault should be created in the East US region to back up Disk-OS-East. Virtual machine backups must reside in a Recovery Services Vault within the same region (East US). In contrast, individual disk-level backups are supported by Backup Vaults, which also must reside in the same region (East US) as the disk.

Step-by-Step Solution

1
Determine the vault type and regional requirements for Azure Virtual Machine backups.
Azure Virtual Machines must be backed up to a Recovery Services Vault located in the same region as the virtual machine.
VM-East-Prod resides in the East US region, meaning it must be registered with RSV-East-02. It cannot be registered directly with RSV-West-02, even if that vault is configured with Cross-Region Restore.
2
Determine the vault type and regional requirements for individual Azure Disk backups.
Azure Disk backup is supported by Backup Vaults, and the vault must reside in the same region as the target disks.
To back up Disk-OS-East independently of the VM lifecycle, a Backup Vault must be deployed in the East US region.
3
Determine the vault type and regional requirements for Azure File shares.
Azure Files backup is supported by Recovery Services Vaults in the same region as the storage account.
The file shares hosted in saeastfiles (East US) must be backed up to a Recovery Services Vault in East US (such as RSV-East-02). Backup Vaults do not support Azure Files backups.

Key Concept

Recovery Services Vault vs. Backup Vault workload compatibility and regional alignment constraints
Rate this question