Examkin

Question

Difficulty: MediumDesign Azure Backup Solutions

Your company uses an Azure Files share to store critical application configuration files. You are designing a backup solution to meet the following requirements:
- Recover files deleted within the last 14 days with a near-zero recovery time objective (RTO) using share snapshots.
- Retain historical backup copies for 90 days in a separate security boundary to protect against accidental or malicious deletion of the source storage account.
- Ensure the vaulted backup data is resilient against a primary region outage.

Which backup configuration should you recommend?

  1. Create a Backup vault with Geo-redundant storage (GRS). Configure a backup policy with snapshot retention set to 14 days and vault retention set to 90 days.Answer
  2. B
    Create a Backup vault with Geo-redundant storage (GRS). Configure a backup policy with snapshot retention set to 5 days and vault retention set to 90 days.
  3. C
    Create a Backup vault with Locally-redundant storage (LRS). Configure a backup policy with snapshot retention set to 14 days and vault retention set to 90 days.
  4. D
    Create a Recovery Services vault with Geo-redundant storage (GRS). Configure a backup policy with snapshot retention set to 14 days and vault retention set to 90 days.

Answer

Create a Backup vault with Geo-redundant storage (GRS). Configure a backup policy with snapshot retention set to 14 days and vault retention set to 90 days.
The correct configuration uses a Backup vault with Geo-redundant storage (GRS) and a backup policy retaining local snapshots for 14 days and vault backups for 90 days. This separates the operational snapshot tier (which provides near-zero RTO restores) from the vaulted tier (which provides a separate security boundary to protect against storage account deletion), while GRS ensures that the vault remains available in the event of a regional outage.

Step-by-Step Solution

1
Determine the local snapshot retention requirement.
Snapshot-tier retention must be set to 14 days.
Near-zero RTO restores rely on local share snapshots in the source storage account. Restoring from the vaulted tier takes longer because the data must be transferred back.
2
Identify the correct vault type and security boundary configuration.
Use a Backup vault and configure vaulted backup.
Vaulted backup copies data to a separate security boundary, protecting it from storage account deletion. Recovery Services vaults do not support vaulted backups for Azure Files.
3
Select the backup storage redundancy model.
Configure the Backup vault with Geo-redundant storage (GRS).
To survive a primary region outage, the vault's storage redundancy must be geo-redundant.

Key Concept

Azure Files vaulted backup separates snapshot-level operational recovery (for low RTO) from vault-level long-term retention (for security boundaries and regional resilience).
Rate this question

Topics

Design Azure Backup Solutions

More questions from this topic