You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region. You are designing a disaster recovery plan for KeyVault1. You plan to back up the keys in…

The correct answer is D. the same geography only. When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within…

Submitted by diego_uy· Mar 6, 2026Design business continuity solutions

Question

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region. You are designing a disaster recovery plan for KeyVault1. You plan to back up the keys in KeyVault1. You need to identify to where you can restore the backup. What should you identify?

Options

Aany region worldwide
Bthe same region only
CKeyVault1 only
Dthe same geography only

How the community answered

(13 responses)

B
8% (1)
C
8% (1)
D
85% (11)

Explanation

When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography. https://docs.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice