Exam AZ-103 topic 3 question 20 discussion

Individual File restore requires the MARS agent, which is only supported on specific Operating Systems: https://docs.microsoft.com/en-us/azure/backup/backup-support-matrix-mars-agent. So that removes the option for "any windows machine on the internet". VM1 does not have the MARS agent installed which would not allow it to restore individual files. Furthermore, VM1 is compromised by ransomware, which typically encrypts a whole HDD, rendering it unusable. Therefore, I would say that box 1 should be "VM2 Only". I agree that box 2 should be "restore to a new VM".

In the exams the answers are changed. It should be: 1. VM1 only 2. VM1 and new VM

VM1 can be restored to itself by REPLACE or can be restored to a NEW VM e.g. VM3. As per the documentation : https://learn.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#restore-options

When a network security group (NSG) is applied to a subnet and to a network interface card (NIC) of a virtual machine (VM), the rules of both NSGs are evaluated in the following order: Inbound traffic from the internet or other subnets is evaluated against the rules of the NSG applied to the subnet. If the traffic is allowed by the subnet NSG, the inbound traffic is then evaluated against the rules of the NSG applied to the NIC. If the traffic is allowed by both the subnet NSG and the NIC NSG, the traffic is allowed to the virtual machine. If the traffic is denied by either the subnet NSG or the NIC NSG, the traffic is blocked and not allowed to the virtual machine.

Restoring involves copying backup files from a secondary storage (backup media) to disk. This can be done to replace damaged files or to copy/move a database to a new location. Recovery is the process of applying redo logs to the database to roll it forward. One can roll-forward until a specific point-in-time (before the disaster occurred), or roll-forward until the last transaction recorded in the log files. Box2(Restore)= New VM (new location) Box1(Recovery) = VM1 roll-forward until a specific point in time before disaster occured

I think the answer is wrong, 1. Any Windows with Internet Connectivity. https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm 2. its VM1 and any new VM

BOX1: A new Azure virtual machinne only Because VM1 does not have the Azure Backup agent installed and which is only supported on specific Operating Systems: Evidence: https://docs.microsoft.com/en-us/azure/backup/backup-support-matrix-mars-agent BOX2: VM1 and A new Azure virtual machinne only Evidence: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms The image must be wrong, I found the same question with a different image that matches my answers. https://www.exam4training.com/to-which-location-can-you-restore-the-backup-4/

Why would you do a file recovery on VM2? The one that got encrypted was VM1 only so makes sense that you only need to recover the unencrypted files to the same VM.

DO note 'file recovery' vs 'restore' are different cocnepts: 1.should be VM2 only As per below article,a script is required to be run which is not possible to run on original VM as we cannot log into it due to encryption. Further there are strict guidelines on matching OS as described in step 3: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm 2.should be any Windows VM on Internet. In general, options to create new VM/restore disk (which can be connected to existing Windows VM or used to create new VM)/replace existing. Replace existing may not work as described here: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-encryption

Do not be tricked by "without using the Azure Backup agent". This agent is only needed for on premise VMs. Box 1: Any computer with internet connectivity. Box 2: VM1 or New VM. (Option is missing). During full VM restore. You can restore to a new VM or Replace existing.

Just performed a file restore and you can restore files from any internet connected machine because you run a script that mounts a drive using iscsi and from this mount you can restore files.

BOX1: VM1 and VM2 only - ransomware encrypts files/data, not filesystem itself, the idea is to leave OS functional, so they can ask for ransom. So, you can restore files to VM1. BOX2: VM1 and new Azure VM. Here, you can have 2 answers in BOX 2, because they are separated. You can find explanations on these links: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms https://docs.microsoft.com/en-us/azure/backup/about-azure-vm-restore

VM2 only New VM

It should be: 1. ON any VMs or computer(For computer it will need internet). 2. VM1 and new VM

Came in exam 1st Aug 2020. Choices were different.

I'd say any for Box 1 - as doesn't give you any context to say you have access to another machine or not! Very misleading question.

https://docs.microsoft.com/en-us/azure/backup/about-azure-vm-restore Image restore can be done on both Vm1 and Vm2. File restore can be done on Restore can be done in 3 ways : OLR, ALR and ILR. OLR replaces the disks at same VM (VM1). ALR restores onto a different VM (VM2). ILR restores to any machine with internet connectivity.