AZ-104 · Domain 5: Monitor and maintain Azure resources · 14% of the exam
Task 5.2: Implement backup and recovery
Recovery Services vaults and Backup vaults, backup policies, backup and restore, Azure Site Recovery replication and failover, and backup reports and alerts.
Study it
Recovery Services vaults, Backup vaults and backup policies
Try each one before opening the answer. Every option is explained, with the Microsoft documentation page that proves it.
Question 1 · choose 1
You back up VMs in West Europe and North Europe. You created one Recovery Services vault, in West Europe. The North Europe VMs don't appear when you configure backup. What should you do?
AEnable Cross Region Restore on the West Europe vault
BChange the vault's storage replication to geo-redundant
CCreate a second Recovery Services vault in North Europe
DMove the North Europe VMs into the vault's resource group
Show the answer and why
AEnable Cross Region Restore on the West Europe vault
Incorrect
Cross Region Restore restores data to the paired region; it doesn't let the vault protect VMs in another region.
BChange the vault's storage replication to geo-redundant
Incorrect
Replication controls where backup data is copied, not which region's VMs the vault can protect.
CCreate a second Recovery Services vault in North Europe
Correct
A vault protects data sources in its own region, so each region with VMs needs its own vault.
DMove the North Europe VMs into the vault's resource group
Incorrect
The resource group doesn't matter; the region of the VM and the vault must match.
A Recovery Services vault must be in the same region as the data sources it protects. Back up VMs in several regions with one vault per region.
You must protect several workloads with Azure Backup. Which two of them are protected in a Backup vault rather than a Recovery Services vault? (Choose TWO.)
AAzure virtual machines
BAzure file shares
CAzure managed disks
DSQL Server in an Azure VM
EAzure Blob storage
Show the answer and why
AAzure virtual machines
Incorrect
Azure VM backup is orchestrated by a Recovery Services vault.
BAzure file shares
Incorrect
Azure file share backup uses a Recovery Services vault.
CAzure managed disks
Correct
Azure Disk Backup stores its backup instances and policies in a Backup vault.
DSQL Server in an Azure VM
Incorrect
SQL Server in Azure VMs is a Recovery Services vault workload.
EAzure Blob storage
Correct
Blob backup, both operational and vaulted, is configured in a Backup vault.
Recovery Services vaults handle Azure VMs, SQL Server and SAP HANA in VMs, Azure file shares and the MARS agent. Backup vaults hold newer workloads such as Azure Disks, Azure Blobs and Azure Database for PostgreSQL.
Someone stopped protection for a VM and deleted its backup data in a Recovery Services vault three days ago. Soft delete settings are at their defaults. What is the situation?
AThe data is gone, because soft delete covers vaults and not backup items
BThe data is recoverable, because it's kept for 14 days by default
CThe data is recoverable for 180 days, the default retention
DThe data is recoverable from the secondary region through Cross Region Restore
Show the answer and why
AThe data is gone, because soft delete covers vaults and not backup items
Incorrect
Soft delete applies to backup items and recovery points, and to vaults as well.
BThe data is recoverable, because it's kept for 14 days by default
Correct
Deleted backup data stays in a soft-deleted state for 14 days by default, and you can undelete it in that time.
CThe data is recoverable for 180 days, the default retention
Incorrect
180 days is the longest soft-delete retention you can set; the default is 14 days.
DThe data is recoverable from the secondary region through Cross Region Restore
Incorrect
Soft-deleted data stays in the vault; recovering it doesn't depend on Cross Region Restore.
Soft delete keeps deleted backup data for a retention period of 14 days by default, configurable from 14 to 180 days, and the first 14 days cost nothing. Recover the item by undeleting it and then resuming protection.
VMs in East US replicate to West US with Azure Site Recovery. Auditors want a disaster recovery drill each quarter without affecting production or stopping replication. What should you do?
ARun a failover to West US, then fail back after the drill
BRun a test failover into a nonproduction virtual network
CRun a failover and leave the recovery point uncommitted
DRestore the VMs from Azure Backup into the West US region
Show the answer and why
ARun a failover to West US, then fail back after the drill
Incorrect
A failover moves the workload to the target region, which takes production out of East US.
BRun a test failover into a nonproduction virtual network
Correct
A test failover creates VMs in the network you pick while replication goes on; clean up the test afterward.
CRun a failover and leave the recovery point uncommitted
Incorrect
Even without a commit, a failover brings the VMs up in the target region as a real recovery; it isn't a drill.
DRestore the VMs from Azure Backup into the West US region
Incorrect
A backup restore tests backups, not the Site Recovery replication and failover the auditors want to see.
Test failover runs a drill in an isolated or nonproduction network without data loss or interruption to replication. Afterward, run Cleanup test failover to delete the test VMs.
A three-tier app replicates with Site Recovery. On failover, the database VMs must start first, then the middle tier, then the web servers. What should you create?
AA recovery plan with three groups in that order
BAn availability set per tier
CThree separate test failovers
DA backup policy with three schedules
Show the answer and why
AA recovery plan with three groups in that order
Correct
A recovery plan gathers machines into groups that fail over in sequence, with optional scripts.
BAn availability set per tier
Incorrect
Availability sets don't control failover order.
CThree separate test failovers
Incorrect
Running separate failovers one by one doesn't define an order for a real failover.
DA backup policy with three schedules
Incorrect
Backup policies have nothing to do with failover order.
Recovery plans define the order, actions and scripts for failing over a set of machines, so applications come up in the right sequence.
A VM is being retired, but its backups must stay restorable for audit. No new backups should run. What should you do?
AStop protection and retain backup data
BChange the policy to retain zero days
CStop protection and delete backup data
DDelete the Recovery Services vault
Show the answer and why
AStop protection and retain backup data
Correct
This stops future backups and keeps the existing recovery points.
BChange the policy to retain zero days
Incorrect
Retention can't be zero, and shortening it would remove recovery points.
CStop protection and delete backup data
Incorrect
Deleting the data removes the recovery points auditors need.
DDelete the Recovery Services vault
Incorrect
A vault with backup items can't be deleted, and it would remove the data.
Stop protection with retain backup data ends scheduled backups but keeps recovery points, which you can restore later. Charges for the retained data continue.
You stopped protection and deleted the backup data of the last VM in a Recovery Services vault, then tried to delete the vault. It fails. What's the cause?
AThe vault still has a backup policy assigned
BCross Region Restore must be disabled
CThe deleted backup items are in the soft-deleted state
DThe vault must be moved to another resource group first
Show the answer and why
AThe vault still has a backup policy assigned
Incorrect
Policies don't block deletion; protected and soft-deleted items do.
BCross Region Restore must be disabled
Incorrect
Cross Region Restore doesn't block vault deletion.
CThe deleted backup items are in the soft-deleted state
Correct
A vault with soft-deleted items can't be deleted until they're permanently removed.
DThe vault must be moved to another resource group first
Incorrect
Moving the vault doesn't remove its dependencies.
Before deleting a vault, remove its dependencies: protected items, registered servers and soft-deleted items. Soft-deleted data stays for its retention period unless removed.