Microsoft Azure Architect Design (2020, legacy) — Question 58

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region.
You are designing a disaster recovery plan for KeyVault1.
You plan to back up the keys in KeyVault1.
You need to identify to where you can restore the backup.
What should you identify?

Answer options

• A. KeyVault1 only
• B. the same region only
• C. the same geography only
• D. any region worldwide

Correct answer: C

Explanation

The correct answer is C because Azure Key Vault backups can be restored to any key vault within the same geography, ensuring compliance and data residency requirements. Options A and B are incorrect as they limit the restoration to the same vault or region, while D is incorrect because it allows restoration across all regions, which is not permitted.