QuestionQ274
Design solutions that align with security best practices and prioritiesYou have an Azure AD tenant that synchronizes with an Active Directory Domain Services (AD DS) domain.
Your on-premises datacenter contains 100 servers. The servers run Windows Server and are backed up by using Microsoft Azure Backup Server (MABS).
You are designing a recovery solution for ransomware attacks. The solution adheres to Microsoft Security Best Practices.
You need to ensure that a compromised administrator account cannot be used to delete the backups.
What should you do?
- A From Azure Backup, configure multi-user authorization by using Resource Guard.
- B From Microsoft Azure Backup Setup, register MABS with a Recovery Services vault.
- C From a Recovery Services vault, generate a security PIN for critical operations.
- D From Azure AD Privileged Identity Management (PIM), create a role assignment for the Backup Contributor role.
Community Discussion