MENU
You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain.
You have an on-premises datacenter that contains 100 servers. The servers run Windows Server and are backed up by using Microsoft Azure Backup Server (MABS).
You are designing a recovery solution for ransomware attacks. The solution follows Microsoft Security Best Practices.
You need to ensure that a compromised administrator account cannot be used to delete the backups
What should you do?
Suggested Answer: D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
GE
Genevieve
11 months ago
PIM role assignment sounds good, but is it really enough?
CR
Cristina
11 months ago
Wait, can compromised accounts really bypass these measures?
AD
Adell
12 months ago
Definitely go with Resource Guard for better protection.
CR
Crissy
12 months ago
I think the security PIN option is too basic for this scenario.
MA
Major
1 year ago
Multi-user authorization is a must for security!
CR
Crista
1 year ago
I’m a bit confused about the role assignment in Azure AD PIM; does that really prevent a compromised account from deleting backups?
TA
Tammi
1 year ago
I practiced a similar question where we had to secure backups, and I feel like configuring multi-user authorization was the answer there too.
DE
Desirae
1 year ago
I think generating a security PIN for critical operations could help, but it seems like there might be a better option to prevent admin account misuse.
PE
Pete
1 year ago
I remember something about using multi-user authorization to protect backups, but I'm not entirely sure if Resource Guard is the right feature for this scenario.
CA
Carin
1 year ago
Hmm, this looks like it's asking about a specific feature of Puppet Labs. I'll need to think carefully about the options and see if I can recall what each one refers to.
LO
Lon
1 year ago
Hmm, I'm a bit unsure about this one. The clock issue could be caused by a few different things, so I'll need to think through the options carefully to determine the best solution.
SU
Susana
1 year ago
I feel like we covered DNS zones in class, but I'm not entirely clear on how they relate to routing calls to unknown domains.
FR
Frederica
1 year ago
I remember that database sync is crucial for SSO to work correctly. If they hadn't synced, that could definitely explain why only half the clients are showing up.
AL
Alaine
1 year ago
Wait, so we're trying to stop a hacker from deleting backups? Sounds like a job for Azure's version of James Bond! Option B it is - gotta keep those backups secure, no matter how sneaky the bad guys get.
DA
Dana
1 year ago
Option C, really? Registering MABS with a Recovery Services vault is important, but it doesn't address the security issue of a compromised admin account. I'm sticking with Option B - multi-user authorization is the way to go!
MA
Margurite
1 year ago
Haha, option A with the security PIN? Sounds like something out of a spy movie! But I guess it could work for critical operations. Still, I think Option B is the way to go for this scenario.
AN
An
1 year ago
Definitely, it adds an extra layer of security to prevent any compromised accounts from deleting backups.
AL
Alfreda
1 year ago
Yeah, having multiple users authorize critical operations seems like a safer bet.
TI
Tiffiny
1 year ago
I agree, it does sound pretty cool. But I think Option B with multi-user authorization is more practical.
RA
Raylene
1 year ago
Option A with the security PIN does sound like something out of a spy movie!
AN
Annice
1 year ago
I'm going with Option D. Assigning the Backup Contributor role through PIM will give the necessary permissions while still maintaining control over who can access the backups. Seems like a good way to follow the security best practices.
AD
Adelle
1 year ago
Definitely, following Microsoft Security Best Practices is crucial in designing a recovery solution for ransomware attacks.
RA
Raina
1 year ago
I agree, assigning the Backup Contributor role through PIM is a good way to ensure security while still allowing necessary access.
JA
Jamika
1 year ago
Option D sounds like the best choice. It's important to limit access to backups to prevent them from being deleted.
CH
Cherry
1 year ago
Option B looks like the best choice here. Configuring multi-user authorization with Resource Guard will help prevent a compromised admin account from deleting the backups. Solid security practice!
GE
Gerardo
1 year ago
I think we should implement this solution as soon as possible to mitigate any potential risks.
JE
Jenelle
1 year ago
Definitely, it's important to follow Microsoft Security Best Practices to ensure the safety of our data.
VI
Vilma
1 year ago
I agree, having that extra layer of security is crucial in protecting the backups from ransomware attacks.
VA
Van
1 year ago
Option B looks like the best choice here. Configuring multi-user authorization with Resource Guard will help prevent a compromised admin account from deleting the backups. Solid security practice!
CR
Crista
1 year ago
I agree, configuring multi-user authorization with Resource Guard is a smart move.
RU
Ruthann
1 year ago
Option B is definitely the way to go to protect against ransomware attacks.
FR
Francisca
1 year ago
I think option D could also work well to prevent unauthorized deletion of backups.
DA
Darci
1 year ago
I agree, option B seems like the most secure choice.
ME
Merilyn
2 years ago
I'm not sure, but I think option A could also work by generating a security PIN for critical operations in the Recovery Services vault.
MI
Mirta
2 years ago
I agree with Tamesha, option D seems like the best choice to prevent a compromised administrator account from deleting the backups.
TA
Tamesha
2 years ago
I think we should go with option D, using Azure AD Privileged Identity Management to create a role assignment for the Backup Contributor role.