Microsoft Exam SC-100 Topic 5 Question 18 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 18
Topic #: 5

You have an Azure subscription that contains virtual machines, storage accounts, and Azure SQL databases. All resources are backed up multiple times a day by using Azure Backup. You are developing a strategy to protect against ransomware attacks.

You need to recommend which controls must be enabled to ensure that Azure Backup can be used to restore the resources in the event of a successful ransomware attack.

Which two controls should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

AUse Azure Monitor notifications when backup configurations change.

BRequire PINs for critical operations.

CPerform offline backups to Azure Data Box.

DEncrypt backups by using customer-managed keys (CMKs).

EEnable soft delete for backups.

Show Suggested Answer

Suggested Answer: C

by Celeste at Jan 10, 2023, 12:11 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonida

10 days ago

I believe using Azure Monitor notifications when backup configurations change can help us detect any suspicious activity.

upvoted 0 times

...

Charlene

13 days ago

I agree with Eladia. Encrypting backups with customer-managed keys is also important for security.

upvoted 0 times

...

Ezekiel

15 days ago

B and D are also important controls. PINs for critical operations and CMK-encrypted backups add an extra layer of security.

upvoted 0 times

Chaya

2 days ago

B and D are also important controls. PINs for critical operations and CMK-encrypted backups add an extra layer of security.

upvoted 0 times

...

Lucy

16 days ago

C and E are essential to protect against ransomware. Offline backups and soft delete ensure that your data is safe even if your cloud resources are compromised.

upvoted 0 times

...

Eladia

16 days ago

I think we should enable soft delete for backups to protect against ransomware attacks.

upvoted 0 times

...