Implement backup and recovery
📘Microsoft Certified: Azure Administrator Associate (AZ-104)
1. What is a Recovery Services Vault?
A Recovery Services vault is a special storage entity in Azure that stores backup data and recovery points. It is the central place for managing and monitoring backup and recovery of Azure resources like:
- Virtual Machines (VMs)
- SQL databases
- Azure File Shares
- On-premises servers
Think of it as a secure “container” that holds all your backup data, ensuring that if something goes wrong, you can restore your resources quickly.
Key Features:
- Stores backup data securely.
- Tracks backup jobs and recovery points.
- Supports both Azure VM backups and on-premises server backups via Azure Backup.
2. Types of Vaults in Azure
Azure provides two main types of vaults:
- Recovery Services Vault
- Used for VM backups, SQL workloads, and more.
- Tracks all recovery points.
- Can perform point-in-time restores.
- Supports long-term retention.
- Backup Vault (older version)
- Mainly for VM backups.
- Being replaced by Recovery Services Vault.
- For the exam, focus on Recovery Services Vault.
✅ Tip for the exam: Always choose Recovery Services Vault, unless the question explicitly says “Backup vault.”
3. Creating a Recovery Services Vault in Azure
You can create a Recovery Services Vault in three main steps:
Step 1: Go to the Azure Portal
- Sign in to Azure Portal.
- Search for “Recovery Services vaults” in the search bar.
- Click + Add to create a new vault.
Step 2: Configure Basic Settings
Fill in these important details:
| Field | Description |
|---|---|
| Name | Give your vault a unique, descriptive name. |
| Subscription | Select the Azure subscription to use. |
| Resource Group | Choose an existing resource group or create a new one. |
| Region | Choose the Azure region where the vault will be deployed. |
Exam tip: Once a vault is created, it cannot be moved to a different region. Make sure to select the correct region.
Step 3: Review and Create
- Click Review + create.
- Verify your configuration.
- Click Create.
- Deployment may take a few minutes.
4. Key Vault Settings to Know for AZ-104 Exam
After creating the vault, there are some exam-relevant settings:
- Backup Policies
- Define how often backups run (daily, weekly) and how long data is retained.
- Azure provides default backup policies, but you can create custom policies.
- Storage Redundancy
- Choose how backup data is replicated:
- Locally Redundant Storage (LRS): Data is replicated within one datacenter. Cheaper but less resilient.
- Geo-Redundant Storage (GRS): Data is replicated to a secondary region. More expensive but safer.
- Choose how backup data is replicated:
- Security
- Recovery Services vault supports encryption with Azure Storage Service Encryption.
- You can also configure soft delete to prevent accidental deletion of backup data.
5. Registering Items for Backup
Once the vault is ready, you can start backing up resources:
- Virtual Machines
- Navigate to the vault → Backup → Backup Goal → Select Azure Virtual Machine.
- Choose the VMs you want to protect.
- Apply a backup policy.
- Click Enable Backup.
- Other Workloads
- You can also protect:
- SQL in Azure VMs
- Azure File Shares
- On-premises servers via MARS Agent (Microsoft Azure Recovery Services Agent)
- You can also protect:
✅ Exam Tip: The AZ-104 exam may ask which types of workloads can be backed up by Recovery Services Vault. Remember: VMs, SQL, File Shares, on-premises servers.
6. Monitoring Backup Jobs
- Azure provides job monitoring and alerts in the vault.
- You can check:
- Status of backup jobs (Completed, Failed, In Progress)
- Last backup time
- Next scheduled backup
- Alerts can be configured to notify admins if a backup fails.
7. Important Exam Points
- Recovery Services Vault is region-specific.
- LRS vs GRS: Know the difference.
- Default vs Custom backup policies: Understand how to configure retention and frequency.
- Supported workloads:
- Azure VMs
- SQL on Azure VMs
- Azure File Shares
- On-premises servers via MARS agent
- Soft delete and encryption protect backup data.
- Vault deletion requires all backup data to be deleted first.
Summary
- Recovery Services Vault is your main tool for backup in Azure.
- You create it in a specific region and resource group.
- You define backup policies, choose storage redundancy, and register workloads for backup.
- Monitoring and alerts ensure your backups are reliable.
- Always remember the exam keywords: Recovery Services Vault, Backup Policies, LRS/GRS, Soft Delete, Azure VMs, SQL, Azure Files, On-prem servers.
