Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 4 question 53 discussion

Actual exam question from Microsoft's AZ-305

Question #: 53
Topic #: 4

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.
You are designing a disaster recovery plan for KeyVault1.
You plan to back up the keys in KeyVault1.
You need to identify to where you can restore the backup.
What should you identify?

A. any region worldwide
B. the same region only
C. KeyVault1 only
D. the same geography only

Show Suggested Answer

Suggested Answer: D 🗳️

by Neo2c at Sept. 7, 2022, 8:13 a.m.

Comments

Submit Cancel

Davin0406

Highly Voted 2 years, 7 months ago

Selected Answer: D

appeared in exam, 10/14/2022. I passed with 946/1000 and there were only 1~2 new questions but others were all from AZ-305 dump.

upvoted 19 times

...

Teab91

Highly Voted 2 years, 7 months ago

Selected Answer: D

When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography

upvoted 17 times

...

[Removed]

Most Recent 6 months, 2 weeks ago

Selected Answer: D

D is correct

upvoted 1 times

...

LGWJ12

1 year, 1 month ago

Selected Answer: D

Azure KeyVault must restore the blob into a key vault within the same Azure subscription and Azure geography. https://learn.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli

upvoted 1 times

...

JimmyYop

1 year, 4 months ago

appeared in Exam 01/2024

upvoted 3 times

...

NotMeAnyWay

1 year, 10 months ago

Selected Answer: D

You can restore the backup of an Azure key vault to another Azure key vault in a different Azure region, as long as both of the Azure regions belong to the same geography, and both of the key vaults belong to the same Azure subscription【59†source】. So, the correct answer would be "D. the same geography only".

upvoted 5 times

...

yonie

2 years, 1 month ago

Selected Answer: D

The contents of your key vault can be replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets

upvoted 1 times

...

ninjagatti

2 years, 2 months ago

Selected Answer: D

D is the right answer

upvoted 1 times

...

zellck

2 years, 3 months ago

Selected Answer: D

D is the answer. https://learn.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli#design-considerations When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography.

upvoted 3 times

...

OPT_001122

2 years, 3 months ago

Selected Answer: D

D. the same geography only

upvoted 1 times

...

Tarni

2 years, 4 months ago

This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography. https://learn.microsoft.com/en-us/azure/key-vault/general/backup?tabs=azure-cli Answer: D

upvoted 1 times

...

MarkMac

2 years, 5 months ago

So 'geography' doesn't mean region or even region peers, correct? For example United States would be 'a geography'?

upvoted 7 times

Mltytskr

2 years, 4 months ago

I was confused by this as well. According to https://azure.microsoft.com/en-us/explore/global-infrastructure/geographies/#overview it seems you are correct that the 'geography' is at the county level, above the region.

upvoted 6 times

...