SC-100 Question 8

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  I think the correct answer is BC. The question states clearly "in the event of a successful ransomware attack". The ransomware attack does not delete backups and does not modify backup schedules. The attack purpose is to encrypt. That said by using option C (C. Encrypt backups by using customer-managed keys (CMKs)) you will guarantee that an additional encryption attempt made by Ransomware will not be successful as at that point the backups will be already encrypted.

• 1

  Ransomware tries to encrypt your actual data and to delete (not encrypt!) your backups.

• 1

  I don't think the C is correct because this feature doesn't support backup of virtual machines (VMs); look at https://learn.microsoft.com/en-us/azure/backup/encryption-at-rest-with-cmk?tabs=portal#considerations (third bullet)