SC-100 Certification Practice Question #209

Question

Your company has the virtual machine infrastructure shown in the following table.

The company plans to use Microsoft Azure Backup Server (MABS) to back up the virtual machines to Azure.
You need to provide recommendations to increase the resiliency of the backup strategy to mitigate attacks such as ransomware.
What should you include in the recommendation?

Accepted Answer

The scenario uses **Microsoft Azure Backup Server (MABS)** to back up on-premises VMware/Hyper-V VMs to Azure, and asks how to *increase resiliency against ransomware*. Ransomware's goal against backups is to delete or tamper with them so recovery is impossible. MS Learn's ransomware-protection guidance prescribes requiring an out-of-band security PIN (an extra authentication layer) before critical operations like deleting/disabling backups can proceed — this is exactly the MABS/MARS "Security PIN" feature that protects *Stop Protection with Delete data* and *Change Passphrase*. GRS (A) replicates data geographically for regional disaster recovery but does nothing to stop an attacker (or rogue admin) deleting the backups; maintaining multiple VM copies (B) is not a tamper control; CMK (C) encrypts backup data at rest for confidentiality but does not increase deletion resiliency. The official answer, an overwhelming 22-vote community consensus, and two highly-voted comments all align with MS Learn on D; confidence is held at 86 rather than higher because a few low-vote dissenters reasonably argued for A/C.

More SC-100 practice questions