Soru

Zorluk: OrtaRecovery Services Vaults and Backup Vaults

An administrator is configuring backups for resources in an Azure subscription named `sub-prod-finance`. The subscription contains the resources shown in the following table:

Resource nameResource typeRegion
`rsv-finance-east`Recovery Services vaultEast US
`bv-finance-east`Backup vaultEast US
`vm-web-east`Virtual machineEast US
`vm-db-west`Virtual machineWest US
`safinanceeast`Storage accountEast US
`disk-web-east`Managed diskEast US

Which two configurations can the administrator implement? Select two.

  1. Back up `vm-web-east` to `rsv-finance-east`Cevap
  2. B
    Back up `vm-db-west` to `rsv-finance-east`
  3. Back up `disk-web-east` to `bv-finance-east`Cevap
  4. D
    Back up the storage account `safinanceeast` to `bv-finance-east` by assigning the Reader role on `safinanceeast` to the vault's managed identity

Cevap

Back up `vm-web-east` to `rsv-finance-east` and back up `disk-web-east` to `bv-finance-east`
The correct configurations are backing up `vm-web-east` to `rsv-finance-east` and backing up `disk-web-east` to `bv-finance-east`. Virtual machine backups require a Recovery Services vault in the same region as the virtual machine. Since both `vm-web-east` and `rsv-finance-east` are in East US, this configuration is valid. Azure Disk backup is supported by Backup vaults (not Recovery Services vaults), and both `disk-web-east` and `bv-finance-east` are in East US, which is valid.

Adım Adım Çözüm

1
Analyze regional requirements for virtual machine backup
The virtual machine `vm-web-east` and Recovery Services vault `rsv-finance-east` are both in East US, making this a valid configuration. The virtual machine `vm-db-west` is in West US, which violates the regional alignment rule for Recovery Services vaults.
Azure VM backups require the VM and the Recovery Services vault to be in the same region.
2
Determine the correct vault type and regional support for Azure Disk backup
Managed disks must be backed up to a Backup vault. Since `disk-web-east` and `bv-finance-east` are both in East US, backing up the disk to the Backup vault is a valid configuration.
Azure Disk backup is supported by Backup vaults (not Recovery Services vaults) and requires regional alignment.
3
Evaluate role requirements for Azure Blob backup using Backup vault
Assigning the Reader role is insufficient as it does not grant the necessary data plane permissions required by the Backup vault's managed identity to write or manage backups in the storage account.
Blob backup requires data-plane authorization (specifically the Storage Account Backup Contributor role), whereas Reader is a control-plane only role.

Anahtar Kavram

Recovery Services vaults and Backup vaults support different resource types and have strict regional and role-based access control constraints.
Bu soruyu puanla