Your company has the virtual machine infrastructure shown in the following table. The company plans to use Microsoft Azure Backup Server (MABS) to back up the virtual machines to Azure. You need to…

The correct answer is C. Require PINs to disable backups. Requiring a PIN to disable backups (C) directly addresses ransomware resilience because ransomware attacks often attempt to delete or disable backup jobs before encrypting data. MABS and Azure Backup support a security PIN (also called a security feature PIN) that must be…

Design security solutions for applications and data

Question

Your company has the virtual machine infrastructure shown in the following table. The company plans to use Microsoft Azure Backup Server (MABS) to back up the virtual machines to Azure. You need to provide recommendations to increase the resiliency of the backup strategy to mitigate attacks such as ransomware. What should you include in the recommendation?

Exhibit

Options

AUse geo-redundant storage (GRS).
BUse customer-managed keys (CMKs) for encryption.
CRequire PINs to disable backups.
DImplement Azure Site Recovery replication.

How the community answered

(50 responses)

A
2% (1)
B
4% (2)
C
82% (41)
D
12% (6)

Explanation

Requiring a PIN to disable backups (C) directly addresses ransomware resilience because ransomware attacks often attempt to delete or disable backup jobs before encrypting data. MABS and Azure Backup support a security PIN (also called a security feature PIN) that must be entered to perform critical operations like stopping backups or deleting backup data, preventing automated ransomware scripts from disabling protections. Geo-redundant storage (A) improves availability of backup data across regions but does not prevent ransomware from corrupting or deleting the backups themselves. Customer-managed keys (B) provide encryption control but do not protect against backup deletion. Azure Site Recovery (D) is a disaster recovery tool for VM replication, not a backup resiliency mechanism against ransomware.

Topics

#Ransomware Mitigation#Azure Backup Security#Data Resiliency#Backup Protection

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice