An administrator can delete production data and existing backups under one identity. The design must reduce destructive compromise risk. Which two controls should be assessed? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Give the same identity unrestricted control of Resource Guard and the vault
B.Retained recovery points protected with supported immutability and least-privilege backup administration
C.Rely only on more backup administrators sharing the same unrestricted credentials
D.Resource Guard multiuser authorization controlled independently from the vault administrator

Show the answer and explanation

✓ Correct answers

Retained recovery points protected with supported immutability and least-privilege backup administration
Resource Guard multiuser authorization controlled independently from the vault administrator

Protected retained points and independent critical-operation authorization reduce a single identity's destructive reach. Shared unrestricted guard/vault ownership collapses separation, and more administrators using the same powerful credential do not create an independent permission boundary. Source guide: PDF page 36-37.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.