MENU
You have an Azure subscription that contains virtual machines, storage accounts, and Azure SQL databases. All resources are backed up multiple times a day by using Azure Backup. You are developing a strategy to protect against ransomware attacks.
You need to recommend which controls must be enabled to ensure that Azure Backup can be used to restore the resources in the event of a successful ransomware attack.
Which two controls should you include in the recommendation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Suggested Answer: C
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
FR
Frederica
11 months ago
Wait, do we really need PINs for critical ops? Sounds overkill.
GI
Gilma
11 months ago
Totally agree with soft delete, it's a lifesaver!
SH
Sharen
12 months ago
Not sure about the offline backups, seems a bit excessive.
MA
Magnolia
12 months ago
I think encrypting backups with CMKs is a must too!
BO
Boris
1 year ago
Definitely need to enable soft delete for backups.
LO
Loren
1 year ago
I feel like performing offline backups to Azure Data Box might be a good strategy, but I need to double-check if it’s really necessary for ransomware protection.
TE
Tesha
1 year ago
I practiced a similar question where requiring PINs for critical operations was mentioned, but I’m not convinced it’s the best option here.
TE
Terrilyn
1 year ago
I’m not entirely sure, but I think encrypting backups with customer-managed keys could add an extra layer of security.
CA
Caitlin
1 year ago
I remember something about enabling soft delete for backups; it seems crucial for recovering from ransomware attacks.
NA
Nadine
1 year ago
Okay, I've got this. Based on the requirement to apply a group of base settings at each logon, I think Mandatory Profiles would be the best fit. That way the settings are consistently applied without the user being able to modify them.
AM
Amina
1 year ago
This is a great question. I feel pretty confident I can tackle this one - the key is finding the right balance between upselling and customer experience.
FR
Frankie
1 year ago
Hmm, I'm a little unsure about this one. I know change management is about managing organizational changes, but I'm not sure if that's the exact definition they're looking for here.
MA
Mari
1 year ago
I'm eyeing that Azure Data Box like a kid in a candy store. Offline backups are the way to go, no matter what the hackers throw at us.
LI
Lili
1 year ago
We should also consider encrypting backups with customer-managed keys for added security.
BR
Brendan
1 year ago
I agree, it's a reliable way to protect against ransomware attacks.
OD
Odelia
1 year ago
Offline backups to Azure Data Box are definitely a good idea.
DE
Deeanna
1 year ago
I'm just glad they're not asking us to enable two-factor authentication on our backup accounts. That would be too much work!
DI
Dierdre
1 year ago
Yeah, two-factor authentication would definitely be a hassle.
RO
Ronny
1 year ago
D) Encrypt backups by using customer-managed keys (CMKs).
FL
Flo
1 year ago
A) Use Azure Monitor notifications when backup configurations change.
LE
Leonida
2 years ago
I believe using Azure Monitor notifications when backup configurations change can help us detect any suspicious activity.
CH
Charlene
2 years ago
I agree with Eladia. Encrypting backups with customer-managed keys is also important for security.
EZ
Ezekiel
2 years ago
B and D are also important controls. PINs for critical operations and CMK-encrypted backups add an extra layer of security.
CE
Cecily
1 year ago
That's a good point. Having multiple layers of protection is key in safeguarding against ransomware attacks.
TR
Trinidad
1 year ago
I think enabling soft delete for backups could also be useful in case of accidental deletions or corruption.
VI
Victor
1 year ago
Yes, I agree. PINs can help prevent unauthorized access and CMK encryption adds another level of protection.
CH
Chaya
1 year ago
B and D are also important controls. PINs for critical operations and CMK-encrypted backups add an extra layer of security.
LU
Lucy
2 years ago
C and E are essential to protect against ransomware. Offline backups and soft delete ensure that your data is safe even if your cloud resources are compromised.
EL
Eladia
2 years ago
I think we should enable soft delete for backups to protect against ransomware attacks.