Courses Job Ready Program Fresher Trainings AI For Class 7 to 12 Corporate Training Placements Tutorials
Free Learning Resources

IT Tutorials & Interview Prep

Free guides, interview Q&As, and job responsibility breakdowns — curated by industry veterans to help you crack MNC interviews

248+
Tutorial Articles
17
Topic Categories
100%
Free to Read
← Back to Learning Hub

AZ-104:Day 13 — Azure Backup & Recovery

Learning Hub Last Updated: Sep 16, 2026

Key Points, Definitions, Diagrams, Term Differences & Q&A

1. 25 Most Important Key Points

• Azure Backup is a managed Azure service used to protect supported workloads and recover data after accidental deletion, corruption, operational failure, or other incidents.

• A Recovery Services vault is a management container used for several Azure Backup scenarios, including supported Azure VM protection.

• Azure Backup stores recovery points that represent recoverable states of protected data or workloads.

• A backup policy defines protection settings such as backup schedule/frequency and retention for supported workloads.

• Retention controls how long recovery points are kept according to the configured policy.

• Azure VM backup can provide application-consistent or crash-consistent recovery points depending on workload and configuration.

• Azure VM backup is designed to protect Azure VMs without requiring a traditional customer-managed backup server for the VM workload.

• Azure File Share backup can protect supported Azure file shares and provide recovery options.

• Azure Disk Backup is a supported managed-disk backup capability associated with Backup vault architecture.

• RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss expressed as time.

• RTO (Recovery Time Objective) defines the target time within which a workload or service should be restored.

• Backup frequency is an important factor in achieving an appropriate RPO because it influences how recent recovery points can be.

• Restore duration, dependencies, target resources, network readiness, and procedures influence practical RTO.

• Soft delete helps protect backup data from certain accidental or malicious delete operations by retaining deleted backup data for a limited period.

• Immutability can protect backup data from destructive modification or deletion during a defined protection period where supported.

• Backup storage redundancy choices affect the resilience and recovery characteristics of protected data.

• Cross-region restore can provide additional recovery options for supported Azure Backup scenarios and configurations.

• Backup jobs should be monitored because a failed backup operation may result in missing or outdated recovery points.

• Restore testing validates that protected data can actually be recovered and that procedures can meet business recovery objectives.

• Azure Backup can be managed through the Azure portal and supported automation interfaces such as Azure CLI, PowerShell, and APIs.

• RBAC should follow least privilege when controlling backup configuration, vault administration, backup operations, and restore permissions.

• Backup and disaster recovery are related but different: backup retains recoverable copies, while disaster recovery focuses on restoring services and operations.

• Recovery point selection should consider application state, incident timing, data integrity, and business requirements.

• Backup architecture should be designed around workload type, RPO, RTO, retention, security, cost, and operational recovery procedures.

• Successful backup protection requires more than creating a policy: administrators should monitor jobs, maintain recovery points, protect the vault, and periodically test recovery.

Figure 2: Restore flow — source selection, recovery-point selection, restore type, target recovery, and verification

2. 20 Definitions with Day-to-Day Examples

Azure Backup

Definition: A managed Azure service for protecting supported workloads by creating and retaining backup data and recovery points.

Day-to-Day Example: Like keeping secure copies of important office files so they can be recovered after accidental deletion.

Recovery Services Vault

Definition: A vault used to manage backup and recovery data for supported Azure Backup scenarios.

Day-to-Day Example: Like a secure records room where protected copies are managed.

Backup Vault

Definition: A vault resource used for supported Backup-vault-based Azure backup scenarios.

Day-to-Day Example: Like a dedicated secure storage facility for a specific class of protected assets.

Recovery Point

Definition: A stored point-in-time state that can be selected as a source for recovery.

Day-to-Day Example: Like a saved version of a document from yesterday.

Backup Policy

Definition: Rules that define when backups occur and how long recovery points are retained.

Day-to-Day Example: Like a company rule saying when files are copied and how long copies must be kept.

Retention

Definition: The duration for which recovery points are preserved.

Day.-to-Day Example: Like keeping financial records for a required number of years.

Backup Frequency

Definition: How often a backup operation is scheduled.

Day-to-Day Example: Like copying important files every four hours.

Application-Consistent Backup

Definition: A backup captured with application-aware processing for supported workloads.

Day-to-Day Example: Like saving a database in a coordinated state rather than copying files during an active transaction.

Crash-Consistent Backup

Definition: A recovery state similar to what the system would contain after an unexpected shutdown.

Day-to-Day Example: Like recovering a computer after a sudden power failure.

Soft Delete

Definition: A protection mechanism that retains deleted backup data for a limited period after certain deletion operations.

Day-to-Day Example: Like a recycle bin that keeps deleted records before permanent removal.

Immutability

Definition: Protection that prevents protected backup data from being altered or deleted during a defined period where supported.

Day-to-Day Example: Like placing important records in a tamper-resistant archive.

RPO

Definition: Recovery Point Objective: the maximum acceptable data loss expressed as time.

Day-to-Day Example: A four-hour RPO means the business targets no more than about four hours of recent data loss.

RTO

Definition: Recovery Time Objective: the target time within which service should be restored.

Day-to-Day Example: A two-hour RTO means recovery should target restoration within two hours.

Restore

Definition: The operation of recovering protected data or a workload from a recovery point.

Day-to-Day Example: Like restoring a deleted folder from a saved copy.

Cross-Region Restore

Definition: A supported capability that can allow recovery using backup data associated with another Azure region.

Day-to-Day Example: Like keeping important records in another city for regional outage recovery.

Backup Job

Definition: A managed operation that performs a backup and reports its status.

Day-to-Day Example: Like a scheduled file-copy job that shows Completed or Failed.

Restore Job

Definition: A managed operation that performs recovery from a selected recovery point.

Day-to-Day Example: Like rebuilding a lost folder from a chosen saved version.

Protected Item

Definition: A workload or data source that has been configured for backup protection.

Day-to-Day Example: Like formally enrolling a database in the company's backup program.

Disaster Recovery

Definition: Technical and operational capabilities used to restore services after a major disruption.

Day-to-Day Example: Like having an alternate office and recovery procedures when the main office is unavailable.

Backup Monitoring

Definition: Reviewing jobs, alerts, failures, and recovery-point availability to verify protection is working.

Day-to-Day Example: Like checking delivery records rather than assuming every scheduled delivery occurred.

3. Differences Between Key Technical Terms (10)

Backup vs. Disaster Recovery

FeatureBackupDisaster Recovery
PurposeRetain recoverable data/workloadsRestore services and operations
FocusRecovery pointsService continuity
ExampleRecover deleted VM/dataRecover service after major outage



 

Recovery Services Vault vs. Backup Vault

FeatureRecovery Services VaultBackup Vault
RoleVault for several established Azure Backup scenariosVault for supported newer Backup architectures
ExamplesAzure VM and supported workload backupManaged disk and other supported scenarios
SelectionDepends on workload supportDepends on workload support



 

RPO vs. RTO

FeatureRPORTO
QuestionHow much data loss is acceptable?How long can recovery take?
Measured asTime-based data-loss objectiveTime-based restoration objective
Influenced byBackup frequency/recovery pointsRestore process and dependencies



 

Recovery Point vs. Backup Policy

FeatureRecovery PointBackup Policy
MeaningStored point-in-time stateRules controlling protection
PurposeSource for restoreControls schedule and retention
Example10:00 AM recovery pointDaily backup, 30-day retention



 

Application-Consistent vs. Crash-Consistent

FeatureApplication-ConsistentCrash-Consistent
StateApplication-aware stateState similar to sudden shutdown
TransactionsCoordinated where supportedNot application-aware
UseApplication-aware recoveryGeneral system recovery



 

Soft Delete vs. Immutability

FeatureSoft DeleteImmutability
GoalRecover from certain deletion eventsResist destructive changes/deletion
BehaviorRetains deleted backup data temporarilyRestricts destructive operations during protection period
RoleRecovery safety netTamper-resistance control



 

Backup Job vs. Restore Job

FeatureBackup JobRestore Job
DirectionWorkload → backup storageBackup storage → recovery target
PurposeCreate recovery pointRecover data/workload
ResultProtected copyRecovered resource/data



 

Backup Frequency vs. Retention

FeatureBackup FrequencyRetention
ControlsHow often backups runHow long recovery points remain
ImpactRecovery-point freshnessHistorical recovery choices/storage
ExampleEvery 4 hours30 days



 

Azure Backup vs. Azure Site Recovery

FeatureAzure BackupAzure Site Recovery
Primary purposeBackup and point-in-time recoveryReplication, failover, disaster recovery
Typical useRecover deleted/corrupt dataRecover service after major disruption
Recovery modelRestore from recovery pointFail over to recovery location



 

Vault RBAC vs. Backup Policy

FeatureRBACBackup Policy
AnswersWho can perform/manage actions?When/how is protection scheduled?
FocusAuthorizationProtection configuration
ExampleBackup Contributor permissionsSchedule + retention settings



Figure 3: RPO and RTO are complementary business recovery objectives

Answer: Azure Backup is a managed Azure service used to protect supported workloads by storing backup data and recovery points for later restoration.

Q2. What is a Recovery Services vault?

Answer: It is an Azure vault used to manage backup and recovery data for supported Azure Backup scenarios.

Q3. What is a recovery point?

Answer: A recovery point is a stored point-in-time state that can be selected as the source for a restore operation.

Q4. What is a backup policy?

Answer: A backup policy defines protection behavior such as backup frequency and retention for supported workloads.

Q5. What is retention?

Answer: Retention is the period for which recovery points are preserved, affecting both historical recovery choices and backup storage requirements.

Q6. What is RPO?

Answer: RPO is the maximum acceptable amount of data loss expressed as a time interval.

Q7. What is RTO?

Answer: RTO is the target time within which a workload or service should be restored after a disruption.

Q8. What is the difference between backup and recovery point?

Answer: Backup refers to the protection operation/data, while a recovery point is a selectable point-in-time state used for recovery.

Q9. What is soft delete?

Answer: Soft delete helps retain deleted backup data for a limited period after certain deletion operations, providing protection against some accidental or malicious deletion events.

Q10. What is immutability?

Answer: Immutability is a protection approach that prevents destructive modification or deletion of backup data during a defined protection period where supported.

Q11. What is application-consistent backup?

Answer: It uses application-aware processing where supported to produce a more coordinated application recovery state.

Q12. Why should backup jobs be monitored?

Answer: Monitoring verifies that backup operations completed successfully and that usable recovery points are available.

Q13. What is cross-region restore?

Answer: It is a supported recovery capability that can provide restoration options using backup data associated with another Azure region, depending on workload and configuration.

Q14. Azure Backup vs Azure Site Recovery?

Answer: Azure Backup primarily provides backup and point-in-time recovery; Azure Site Recovery focuses on replication, failover, and disaster recovery.

Q15. Why is restore testing important?

Answer: Successful backups do not by themselves prove that an application can be restored correctly or within its required RTO. Restore testing validates the recovery process.

Figure 4: Layered backup protection — policy, retention, recovery points, deletion protection, and recovery validation

5. Scenario-Based Questions (8)

Q1. A company accidentally deletes an Azure VM and needs yesterday's state. What should it use?

Answer: Use Azure Backup to locate the protected VM and select an appropriate recovery point within the configured retention period, then perform the supported VM restore operation.

Q2. A business can tolerate no more than four hours of recent data loss. Which objective applies?

Answer: RPO. The backup design should provide recovery points frequently enough to support the required four-hour data-loss objective.

Q3. An application must be restored within two hours. Which objective is this?

Answer: RTO. The recovery design must account for restore time, dependencies, target capacity, networking, and operational procedures.

Q4. Several scheduled backups have failed. Can the company assume it is protected?

Answer: No. Failed jobs may leave missing or outdated recovery points. The failures must be investigated and successful protection verified.

Q5. An administrator wants protection against accidental deletion of backup data. What capability is relevant?

Answer: Soft delete is relevant because it can retain deleted backup data for a limited period after certain deletion operations.

Q6. Security requires backup data to resist destructive deletion or modification during a protection period. What should be evaluated?

Answer: Evaluate immutable backup protection where supported. It is designed to make protected backup data resistant to destructive changes during the applicable protection period.

Q7. A team needs to protect an Azure managed disk. Which vault model should they evaluate?

Answer: They should evaluate the Backup vault architecture because Azure Disk Backup is associated with Backup vault-based protection, subject to current service capabilities.

Q8. A company has never tested a restore even though backups are successful. What should it do?

Answer: Perform controlled restore testing, document the recovery procedure, validate application/data integrity, measure recovery time, and confirm the process against the required RPO/RTO.