SC-100 · Question #274
You have two Azure subscriptions named Sub1 and Sub2 that contain the vaults shown in the following table. You need to design a multi-user authorization (MUA) solution for security operations on the…
The correct answer is B. 2. The correct answer is B: 2 Resource Guards. A Resource Guard is a separate Azure resource that enforces multi-user authorization (MUA) by requiring approvals for critical operations. The key constraint is that Resource Guards are type-specific: a Resource Guard configured for…
Question
You have two Azure subscriptions named Sub1 and Sub2 that contain the vaults shown in the following table. You need to design a multi-user authorization (MUA) solution for security operations on the vaults. The solution must meet the following requirements:
- RSVault1 and RSVault2 must require MUA for disabling soft delete,
removing MUA protection, and disabling immutability.
- BackupVault1 and BackupVault2 must require MUA for disabling soft
delete and removing MUA protection. What is the minimum number of Resource Guard resources required?
Exhibit
Options
- A1
- B2
- C3
- D4
How the community answered
(39 responses)- A15% (6)
- B74% (29)
- C3% (1)
- D8% (3)
Explanation
The correct answer is B: 2 Resource Guards. A Resource Guard is a separate Azure resource that enforces multi-user authorization (MUA) by requiring approvals for critical operations. The key constraint is that Resource Guards are type-specific: a Resource Guard configured for Recovery Services vaults (RSVault) cannot be used to protect Backup vaults (BackupVault), and vice versa-they are distinct resource types with different protected operations. Therefore, one Resource Guard is needed to cover both RSVault1 and RSVault2 (regardless of subscription, since cross-subscription Resource Guards are supported), and one separate Resource Guard is needed for BackupVault1 and BackupVault2. A single Resource Guard (A) cannot protect both vault types. Three (C) or four (D) would exceed the minimum required.
Topics
Community Discussion
No community discussion yet for this question.