SC-100 Practice Question 3869

Exam: SC-100
Domain: Design solutions that align with security best practices and priorities
Difficulty: hard
When designing business continuity and disaster recovery (BCDR) for critical workloads, how should immutable backups be architected in Azure to mitigate against malicious deletion by compromised administrators?

Answer Options

A
Deploy Azure Backup with Multi-User Authorization (MUA) and Immutable Vaults
B
Store backup files on public FTP servers without authentication
C
Save backup files in an unencrypted folder on the local domain controller
D
Email database backups to external personal email accounts daily

Correct Answer

A: Deploy Azure Backup with Multi-User Authorization (MUA) and Immutable Vaults

Explanation

Deploy Azure Backup with Multi-User Authorization (MUA) via Resource Guard and Immutable Vaults configured in compliance mode, preventing unauthorized backup deletions or policy modifications.