AZ-104 Certification Practice Question #34

Question

Your company's Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016.
One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you are required to restore the VM.
Which of the following actions should you take?

Accepted Answer

When recovering a VM infected with ransomware, restoring the VM to a new Azure VM (using the "Create new" option in Azure Backup) is the standard and safest approach. This option creates a new virtual machine from a clean recovery point without requiring the deletion of the original infected machine first (which would destroy options for data forensic replacement or disk-swapping, and is not a prerequisite). Restoring to an arbitrary VM or an on-premises Windows device is not supported or practical for restoring the full system state of an Azure VM.

More AZ-104 practice questions