SC-100 Certification Practice Question #240

Question

You have two Azure subscriptions named Sub1 and Sub2 that contain the vaults shown in the following table.

You need to design a multi-user authorization (MUA) solution for security operations on the vaults. The solution must meet the following requirements:

•	RSVault1 and RSVault2 must require MUA for disabling soft delete, removing MUA protection, and disabling immutability.
•	BackupVault1 and BackupVault2 must require MUA for disabling soft delete and removing MUA protection.

What is the minimum number of Resource Guard resources required?

Accepted Answer

A Resource Guard must reside in the same Azure region as the vault it protects, but it can sit in a different subscription or tenant and protect multiple vaults across subscriptions. The four vaults span exactly two regions — East US (RSVault1, BackupVault1) and West US (RSVault2, BackupVault2) — and Resource Guards protect both Recovery Services vaults and Backup vaults. Therefore one Resource Guard per region covers all vaults in that region regardless of their subscription, giving a minimum of 2. Answer A (1) is impossible because a single RG can't span two regions; answer D (4) wrongly assumes the RG must also share the vault's subscription, which the docs contradict. The official Suggested Answer, the 8-vote community pick, and two 👍3 comments all agree on B, so confidence is 88%.

More SC-100 practice questions