Exam 312-49v10 topic 1 question 591 discussion

Creating and saving snapshots in the same resource group initially can be part of the process for quickly capturing the current state of a compromised VM for further forensic analysis and ensuring that the evidence is preserved. This allows investigators to perform a detailed analysis without altering the original state of the compromised system. However, once the snapshots are securely backed up and stored in another region or resource group, deleting them from the source resource group becomes crucial to mitigate the risk of unauthorized access or tampering.