You are designing a backup solution for a fleet of critical Azure Virtual Machines hosting an enterprise resource planning (ERP) application. The solution must meet the following requirements:
- Restore requests for data deleted within the last days must be completed in under minutes using local snapshots.
- The backup schedule must achieve a Recovery Point Objective (RPO) of hours.
- In the event of a complete primary region outage, administrators must be able to immediately initiate restores of the virtual machines in the secondary paired region.
- The storage redundancy configuration must survive a primary region disaster.
Which vault configuration and backup policy design should you recommend to meet these requirements?
- A Recovery Services vault with Geo-Redundant Storage (GRS) and Cross Region Restore (CRR) enabled, using an Enhanced backup policy configured for a twice-daily schedule and days of instant restore retention.Answer
- BA Recovery Services vault with Geo-Redundant Storage (GRS) and Cross Region Restore (CRR) enabled, using a Standard backup policy configured for a daily schedule and days of vault retention, relying on vault-tier restores for the -day recovery window.
- CA Recovery Services vault with Locally Redundant Storage (LRS) and Cross Region Restore (CRR) enabled, using an Enhanced backup policy configured for a twice-daily schedule and days of instant restore retention.
- DA Recovery Services vault with Geo-Redundant Storage (GRS) and Cross Region Restore (CRR) disabled, using an Enhanced backup policy configured for a twice-daily schedule and days of instant restore retention, relying on direct read-access to the secondary storage account replication endpoint during an outage.
Answer
The correct configuration is a Recovery Services vault with Geo-Redundant Storage (GRS) and Cross Region Restore (CRR) enabled, using an Enhanced backup policy configured for a twice-daily schedule and days of instant restore retention.
The correct configuration uses a Recovery Services vault with GRS and CRR enabled, along with an Enhanced backup policy. The Enhanced backup policy is necessary to support multiple backups per day (achieving the -hour RPO) and to extend the instant restore snapshot retention beyond the Standard policy's -day limit to the required days. Enacting GRS with CRR ensures that recovery points are immediately accessible for restore operations in the secondary paired region during a primary region failure.
Step-by-Step Solution
Key Concept
Azure VM Backup Policies (Standard vs. Enhanced) and Vault Redundancy (GRS with CRR)