Exam AZ-104 topic 4 question 60 discussion

Correct Answer: Box 1: Any Windows computer that has Internet connectivity For files recovery, you download and run a windows executable to map a network drive. It can only run when the OS meets the requirements. Any computer running Windows Server 2016 or Windows 10 is suitable. File recovery can be done from any machine on the Internet. Note: There might be compatibility issues with any Windows computer, so consider VM1 and VM2 only as an answer. Box 2: VM1 or a new Azure virtual machine only For restoring a VM, you can choose 'Create new' or 'Replace existing'. Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/backup/backup-azure-restore-files-from-vm.md#for-windows-os

File recovery can be done from any machine on internet. for restoring the VM, you can restore the backed up disk and either restore the disk before the malware (VM) or create a any virtual machine

WRONG - VM1 and VM2 only - VM1 or a new Azure virtual machine only

File Recovery: Any Windows computer that has Internet connectivity VM Restoration: VM1 or a new Azure virtual machine only

Final Answer : 1 A, Any Windows computer that has Internet connectivity 2 b, a new Azure virtual machine only

- Box 1: Any Windows computer that has Internet connectivity - Box 2: a new Azure virtual machine only

Here is the doc link that clearly says you need to use a Windows 10 machine for file recovery from Win 2016. https://learn.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm#step-2-ensure-the-machine-meets-the-requirements-before-executing-the-script

The answer of BOX 2 is correct. However, the answer to BOX 1 is tricky. I was able to successfully recover files to my local Windows PC today, 20/8/2023. So I'd say any windows computer with internet connectivity is the correct answer. The only "challenge" is that it has to be a current/supported release. I don't think you can recover it on a Windows 7 or Vista machine anymore. I am no script expert so I don't really know if the downloaded scripts checks for Windows version. But I can definitely say you don't have to use an Azure VM to recover files from the affected VM.

5 & 2 is correct!

For box 2 the answer looks correct, VM1 or a new Azure VM. Box 1 is a little tricky as people are suggesting. Provided the VM's are compatible as per below it could be, VM1 & VM2 only or VM1 and a new VM only but not sure I'm happy with the latter, I guess it depends on what Microsoft are actually questioning us on. However looking at the below URL and step 4, I'd be tempted to say, Any Windows that has internet connectivity. (Provided it's compatible) https://learn.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm

In the first scenario, the correct answer is "VM1 and VM2 only" because the question asks where you can restore the latest backup of VM1, and VM1 is not affected by ransomware. Therefore, you need to restore the backup to a compatible machine, which is either VM1 or VM2. In the second scenario, the correct answer is "VM1 or a new Azure virtual machine only" because the question asks where you can restore the entire VM, not just files. You can choose to create a new VM or replace the existing one, but the restore can only be done to VM1 or a new Azure virtual machine.

Assumption: The compromised VM must have been created using ARM deployment, and Un-encrypted. Box 1: Any Windows computer that has Internet connectivity Box 2: VM1 or new Azure VM only - referred as OLR - Original Location Recovery and ALR - Alternate location recovery - https://learn.microsoft.com/en-us/azure/backup/about-azure-vm-restore#restore-scenarios

Yhttps://www.youtube.com/watch?v=1_P6sfB5vRA You can restore VM1 to VM1 or a new Azure virtual machine only

1. Any Windows computer that has Internet 2. VM or new Azure VM only https://learn.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm https://learn.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#choose-a-vm-restore-configuration - Create new: Use this option if you want to create a new VM. You can create a VM with simple settings, or restore a disk and create a customized VM. - Replace existing: Use this option if you want to replace disks on an existing VM.

Whilst it sounds arcane, the answer to Box 1 is any computer that has internet connectivity. I have tested and can confirm I can restore files from a Azure VM restore point that is in an Azure Recovery Vault to a physical windows 10 laptop connected to the internet . This laptop is non Hybrid, non domain joined and happily recovered any files I chose to itself. Box2 is New or Replace existing - i also tested this and those were the two options to fully restore VM1.

I could be wrong but when you look at the question and the answers. I legit think the answer is correct as stands (poorly worded question). Therefore as long as it meets the requirements and as long as its ONLY a vm as outlined: "This feature is available for Azure VMs deployed using the Resource Manager model and protected to a Recovery Services vault. File recovery from an encrypted VM backup isn't supported." I could be wrong because the question is very very tricky, but i'm going to trust my guy here. As much as we love mlantonis and by all mean's he's the G.O.A.T! But i do think he has it wrong here, because it specifically states VM's ONLY. Therefore it cannot be Any pc that has internet connectivity even though in theory that makes sense but for microsoft that doesn't comply with their article found in the link below. https://learn.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm

@mlantonis Box 1 which one did u choose? Any Windows computer that has Internet connectivity or VM1 and VM2 only as an answer. I am really confused.