az-801 Practice Question 1913
Exam: az-801
Domain: Implement disaster recovery
Topic: Manage backup and recovery for Windows Server
Difficulty: medium
In a scenario where a Windows Server 2019 machine has experienced a ransomware attack, which of the following actions should you take to restore the system state and minimize data loss? The server is part of an on-premises network with no direct internet access.
Answer Options
A
Use Azure Backup to restore the server from the latest backup in the cloud.
B
Use the System State Restore feature in Windows Server Backup to restore the system state.
C
Use a third-party backup software to restore the server from a recent backup.
D
Perform a full system restore from the last backup point available on the server.
Correct Answer
B: Use the System State Restore feature in Windows Server Backup to restore the system state.
Explanation
The correct answer is B because the System State Restore feature in Windows Server Backup can restore the system state without affecting user files, minimizing data loss. Option A is incorrect as it involves using Azure Backup, which requires internet access. Option C is incorrect as it suggests using a third-party tool, which may not be compatible or secure. Option D is incorrect as it suggests a full system restore, which would also affect user files and data.