nerdexam
Microsoft

SC-100 · Question #164

You have a Microsoft Entra tenant that syncs with an Active Directory Domain Services (AD DS) domain. You have an on-premises datacenter that contains 100 servers. The servers run Windows Server and a

Sign in or unlock SC-100 to reveal the answer and full explanation for question #164. The question stem and answer options stay visible for context.

Design security solutions for infrastructure

Question

You have a Microsoft Entra tenant that syncs with an Active Directory Domain Services (AD DS) domain. You have an on-premises datacenter that contains 100 servers. The servers run Windows Server and are backed up by using Microsoft Azure Backup Server (MABS). You are designing a recovery solution for ransomware attacks. The solution follows Microsoft Security Best Practices. You need to ensure that a compromised administrator account cannot be used to delete the backups. What should you do?

Options

  • AFrom Azure Backup, configure multi-user authorization by using Resource Guard.
  • BFrom Microsoft Azure Backup Setup, register MABS with a Recovery Services vault.
  • CFrom a Recovery Services vault, generate a security PIN for critical operations.
  • DFrom Microsoft Entra Privileged Identity Management (PIM), create a role assignment for the

Unlock SC-100 to see the answer

You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Azure Backup#Ransomware Protection#Multi-User Authorization#Resource Guard
Full SC-100 Practice