exam questions

Exam AZ-304 All Questions

View all questions & answers for the AZ-304 exam

Exam AZ-304 topic 4 question 26 discussion

Actual exam question from Microsoft's AZ-304
Question #: 26
Topic #: 4
[All AZ-304 Questions]

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.
You are designing a disaster recovery plan for KeyVault1.
You plan to back up the keys in KeyVault1.
You need to identify to where you can restore the backup.
What should you identify?

  • A. KeyVault1 only
  • B. the same region only
  • C. the same geography only
  • D. any region worldwide
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography.
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/backup

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
leo_az300
Highly Voted 3 years, 7 months ago
The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the [same geography] to maintain high durability of your keys and secrets. C is correct
upvoted 15 times
cfsxtuv33
3 years, 6 months ago
Yes, you are correct as well as the answer "C."
upvoted 3 times
...
syu31svc
3 years, 7 months ago
From https://docs.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance
upvoted 3 times
...
...
saptati
Highly Voted 3 years, 8 months ago
When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography. Ref: https://docs.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli#design-considerations
upvoted 7 times
...
apoq
Most Recent 3 years, 3 months ago
B & C is correct
upvoted 2 times
nidhogg
2 years, 8 months ago
B would be true if the word 'only' at the end of the sentence was removed.
upvoted 1 times
...
...
jpvdham
3 years, 7 months ago
Answer C. Given answer is correct, including explanation.
upvoted 2 times
...
aleksey_o
3 years, 8 months ago
Answer B: the same region only
upvoted 4 times
...
saptati
3 years, 8 months ago
Kindly delete all the my posts here, sorry for the Typo.
upvoted 1 times
...
saptati
3 years, 8 months ago
When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography. Ref: When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago