Skip to content

AZ-104 · Domain 5: Monitor and maintain Azure resources · 14% of the exam

Task 5.2: Implement backup and recovery

Recovery Services vaults and Backup vaults, backup policies, backup and restore, Azure Site Recovery replication and failover, and backup reports and alerts.

Study it

Sample questions

Try each one before opening the answer. Every option is explained, with the Microsoft documentation page that proves it.

Question 1 · choose 1

You back up VMs in West Europe and North Europe. You created one Recovery Services vault, in West Europe. The North Europe VMs don't appear when you configure backup. What should you do?

  1. AEnable Cross Region Restore on the West Europe vault
  2. BChange the vault's storage replication to geo-redundant
  3. CCreate a second Recovery Services vault in North Europe
  4. DMove the North Europe VMs into the vault's resource group
Show the answer and why
  • AEnable Cross Region Restore on the West Europe vault

    Incorrect

    Cross Region Restore restores data to the paired region; it doesn't let the vault protect VMs in another region.

  • BChange the vault's storage replication to geo-redundant

    Incorrect

    Replication controls where backup data is copied, not which region's VMs the vault can protect.

  • CCreate a second Recovery Services vault in North Europe

    Correct

    A vault protects data sources in its own region, so each region with VMs needs its own vault.

  • DMove the North Europe VMs into the vault's resource group

    Incorrect

    The resource group doesn't matter; the region of the VM and the vault must match.

A Recovery Services vault must be in the same region as the data sources it protects. Back up VMs in several regions with one vault per region.

Question 2 · choose 2

You must protect several workloads with Azure Backup. Which two of them are protected in a Backup vault rather than a Recovery Services vault? (Choose TWO.)

  1. AAzure virtual machines
  2. BAzure file shares
  3. CAzure managed disks
  4. DSQL Server in an Azure VM
  5. EAzure Blob storage
Show the answer and why
  • AAzure virtual machines

    Incorrect

    Azure VM backup is orchestrated by a Recovery Services vault.

  • BAzure file shares

    Incorrect

    Azure file share backup uses a Recovery Services vault.

  • CAzure managed disks

    Correct

    Azure Disk Backup stores its backup instances and policies in a Backup vault.

  • DSQL Server in an Azure VM

    Incorrect

    SQL Server in Azure VMs is a Recovery Services vault workload.

  • EAzure Blob storage

    Correct

    Blob backup, both operational and vaulted, is configured in a Backup vault.

Recovery Services vaults handle Azure VMs, SQL Server and SAP HANA in VMs, Azure file shares and the MARS agent. Backup vaults hold newer workloads such as Azure Disks, Azure Blobs and Azure Database for PostgreSQL.

Question 3 · choose 1

Someone stopped protection for a VM and deleted its backup data in a Recovery Services vault three days ago. Soft delete settings are at their defaults. What is the situation?

  1. AThe data is gone, because soft delete covers vaults and not backup items
  2. BThe data is recoverable, because it's kept for 14 days by default
  3. CThe data is recoverable for 180 days, the default retention
  4. DThe data is recoverable from the secondary region through Cross Region Restore
Show the answer and why
  • AThe data is gone, because soft delete covers vaults and not backup items

    Incorrect

    Soft delete applies to backup items and recovery points, and to vaults as well.

  • BThe data is recoverable, because it's kept for 14 days by default

    Correct

    Deleted backup data stays in a soft-deleted state for 14 days by default, and you can undelete it in that time.

  • CThe data is recoverable for 180 days, the default retention

    Incorrect

    180 days is the longest soft-delete retention you can set; the default is 14 days.

  • DThe data is recoverable from the secondary region through Cross Region Restore

    Incorrect

    Soft-deleted data stays in the vault; recovering it doesn't depend on Cross Region Restore.

Soft delete keeps deleted backup data for a retention period of 14 days by default, configurable from 14 to 180 days, and the first 14 days cost nothing. Recover the item by undeleting it and then resuming protection.

Question 4 · choose 1

VMs in East US replicate to West US with Azure Site Recovery. Auditors want a disaster recovery drill each quarter without affecting production or stopping replication. What should you do?

  1. ARun a failover to West US, then fail back after the drill
  2. BRun a test failover into a nonproduction virtual network
  3. CRun a failover and leave the recovery point uncommitted
  4. DRestore the VMs from Azure Backup into the West US region
Show the answer and why
  • ARun a failover to West US, then fail back after the drill

    Incorrect

    A failover moves the workload to the target region, which takes production out of East US.

  • BRun a test failover into a nonproduction virtual network

    Correct

    A test failover creates VMs in the network you pick while replication goes on; clean up the test afterward.

  • CRun a failover and leave the recovery point uncommitted

    Incorrect

    Even without a commit, a failover brings the VMs up in the target region as a real recovery; it isn't a drill.

  • DRestore the VMs from Azure Backup into the West US region

    Incorrect

    A backup restore tests backups, not the Site Recovery replication and failover the auditors want to see.

Test failover runs a drill in an isolated or nonproduction network without data loss or interruption to replication. Afterward, run Cleanup test failover to delete the test VMs.

Question 5 · choose 1

A three-tier app replicates with Site Recovery. On failover, the database VMs must start first, then the middle tier, then the web servers. What should you create?

  1. AA recovery plan with three groups in that order
  2. BAn availability set per tier
  3. CThree separate test failovers
  4. DA backup policy with three schedules
Show the answer and why
  • AA recovery plan with three groups in that order

    Correct

    A recovery plan gathers machines into groups that fail over in sequence, with optional scripts.

  • BAn availability set per tier

    Incorrect

    Availability sets don't control failover order.

  • CThree separate test failovers

    Incorrect

    Running separate failovers one by one doesn't define an order for a real failover.

  • DA backup policy with three schedules

    Incorrect

    Backup policies have nothing to do with failover order.

Recovery plans define the order, actions and scripts for failing over a set of machines, so applications come up in the right sequence.

Question 6 · choose 1

VMs failed over from East US to West US and now run in West US. The East US region has recovered. What must you do before failing back?

  1. AReprotect the VMs so they replicate from West US to East US
  2. BCommit the failover again
  3. CDisable replication and recreate the VMs in East US
  4. DRun a test failover to East US
Show the answer and why
  • AReprotect the VMs so they replicate from West US to East US

    Correct

    Reprotect starts replication in the reverse direction, which a failback needs.

  • BCommit the failover again

    Incorrect

    Commit finalizes the earlier failover; it doesn't start reverse replication.

  • CDisable replication and recreate the VMs in East US

    Incorrect

    Disabling replication loses the reverse replication you need.

  • DRun a test failover to East US

    Incorrect

    A test failover needs replication toward East US, which reprotect sets up.

After a failover is committed, reprotect the VMs so they replicate back to the original region. When synchronized, fail back and reprotect again.

Question 7 · choose 1

A VM is being retired, but its backups must stay restorable for audit. No new backups should run. What should you do?

  1. AStop protection and retain backup data
  2. BChange the policy to retain zero days
  3. CStop protection and delete backup data
  4. DDelete the Recovery Services vault
Show the answer and why
  • AStop protection and retain backup data

    Correct

    This stops future backups and keeps the existing recovery points.

  • BChange the policy to retain zero days

    Incorrect

    Retention can't be zero, and shortening it would remove recovery points.

  • CStop protection and delete backup data

    Incorrect

    Deleting the data removes the recovery points auditors need.

  • DDelete the Recovery Services vault

    Incorrect

    A vault with backup items can't be deleted, and it would remove the data.

Stop protection with retain backup data ends scheduled backups but keeps recovery points, which you can restore later. Charges for the retained data continue.

Question 8 · choose 1

You stopped protection and deleted the backup data of the last VM in a Recovery Services vault, then tried to delete the vault. It fails. What's the cause?

  1. AThe vault still has a backup policy assigned
  2. BCross Region Restore must be disabled
  3. CThe deleted backup items are in the soft-deleted state
  4. DThe vault must be moved to another resource group first
Show the answer and why
  • AThe vault still has a backup policy assigned

    Incorrect

    Policies don't block deletion; protected and soft-deleted items do.

  • BCross Region Restore must be disabled

    Incorrect

    Cross Region Restore doesn't block vault deletion.

  • CThe deleted backup items are in the soft-deleted state

    Correct

    A vault with soft-deleted items can't be deleted until they're permanently removed.

  • DThe vault must be moved to another resource group first

    Incorrect

    Moving the vault doesn't remove its dependencies.

Before deleting a vault, remove its dependencies: protected items, registered servers and soft-deleted items. Soft-deleted data stays for its retention period unless removed.

Practise domain 5 →Practise all domains →