Your company has an Azure subscription named Sub-Finance-Prod that contains the resources shown in the following table:
| Resource Name | Resource Type | Azure Region | Resource Group |
|---|---|---|---|
| VM-Core-01 | Virtual machine | East US | RG-Core |
| stfinance01 | Storage account (block blobs) | East US | RG-Finance |
You deploy the following vaults to a resource group named RG-Backup:
- RSV-East-01: A Recovery Services vault in East US
- RSV-West-01: A Recovery Services vault in West US
- BV-East-01: A Backup vault in East US
You need to back up VM-Core-01 and configure operational backup for the block blobs in stfinance01.
Which two actions should you perform? Select two.
- Configure the backup of VM-Core-01 to RSV-East-01.Cevap
- Assign the Storage Blob Data Contributor role on stfinance01 to the system-assigned managed identity of BV-East-01.Cevap
- CConfigure the backup of VM-Core-01 to RSV-West-01.
- DAssign the Contributor role on stfinance01 to the system-assigned managed identity of BV-East-01.
Cevap
To successfully back up the resources, you must configure the backup of VM-Core-01 to RSV-East-01 and assign the Storage Blob Data Contributor role on stfinance01 to the system-assigned managed identity of BV-East-01.
To back up Azure Virtual Machines, the Recovery Services Vault must be in the same region as the virtual machine. Therefore, VM-Core-01 (in East US) must be backed up to RSV-East-01. To configure operational backup for Azure Blobs, a Backup Vault is used, and the vault's managed identity must be assigned the Storage Blob Data Contributor role on the target storage account to grant the necessary data-plane permissions.
Adım Adım Çözüm
Anahtar Kavram
Azure Backup regional constraints for virtual machines using Recovery Services Vaults, and data-plane role assignments (Storage Blob Data Contributor) for configuring block blob backups using Backup Vaults.