AZ-104 Monitor and Maintain Azure Resources Practice Question
An administrator accidentally deletes a VM backup item from a Recovery Services vault. The company wants a built-in protection feature that helps recover the deleted backup item during the retention window. Which feature is this?
⚠ Common exam trap
Many candidates confuse soft delete with other data protection features like archive tier or private endpoint, not realizing that soft delete is specifically designed to recover accidentally deleted backup items within the retention window.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Soft delete
Soft delete is a built-in protection feature for Azure Recovery Services vaults that preserves deleted backup data for an additional 14 days (default retention period) after deletion. When a backup item is accidentally deleted, soft delete retains the data in a 'soft deleted' state, allowing administrators to recover it within the retention window before permanent deletion occurs. This feature is enabled by default for new vaults and helps prevent data loss from accidental or malicious deletions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Archive tier
Why it's wrong here
Archive tier is a storage access tier used to move older recovery points to low-cost, high-latency storage for long-term retention. It is an option within the backup lifecycle for cost savings, not a deletion-recovery mechanism. An archived recovery point that is deleted follows the same soft-delete and retention rules as any other backup item, so this tier does not by itself protect against accidental deletion.
When this WOULD be correct
A question asks: 'Which feature reduces backup storage costs for data that is rarely accessed and must be retained for years?' Archive tier would be the correct answer.
- ✗
Availability zones
Why it's wrong here
Availability zones provide resiliency by replicating services and data across physically separate datacenter facilities within a region. This protects against infrastructure failures, such as power outages or network issues in one zone, but does not guard against an administrator manually deleting a backup item. Deletion is an intentional metadata and lifecycle operation in the Recovery Services vault, unrelated to underlying availability.
When this WOULD be correct
In a question asking for a feature that ensures high availability and resilience for Azure resources (e.g., VMs) by replicating them across physically separate locations within a region, Availability zones would be the correct answer.
- ✗
Private endpoint
Why it's wrong here
A private endpoint assigns a Recovery Services vault a private IP address within a virtual network, restricting backup and restore traffic to private network clients. It alters the network path for accessing the vault but does not intercept or influence the lifecycle of a backup item. Therefore, it cannot recover a VM backup item that has been accidentally deleted.
When this WOULD be correct
An organization requires that all traffic to the Recovery Services vault must traverse a private network and not the public internet to meet compliance requirements. In this scenario, enabling a private endpoint would be the correct answer.
- ✓
Soft delete
Why this is correct
In Azure Backup, soft delete retains a deleted backup item in a recoverable state for 14 days after the delete action is performed on the Recovery Services vault. During this retention window, an administrator can use the Undelete operation to restore the protected VM backup and resume normal protection. This is the intended safety net for accidental deletion, though disabling soft delete forfeits that protection.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Soft deleteCorrect answer▾
Why this is correct
In Azure Backup, soft delete retains a deleted backup item in a recoverable state for 14 days after the delete action is performed on the Recovery Services vault. During this retention window, an administrator can use the Undelete operation to restore the protected VM backup and resume normal protection. This is the intended safety net for accidental deletion, though disabling soft delete forfeits that protection.
✗Archive tierWrong answer — click to see why▾
Why this is wrong here
Archive tier is a storage tier for long-term retention of backup data, not a feature to recover accidentally deleted backup items within the retention window.
★ When this WOULD be the correct answer
A question asks: 'Which feature reduces backup storage costs for data that is rarely accessed and must be retained for years?' Archive tier would be the correct answer.
Why candidates choose this
Candidates might confuse 'archive' with a recovery feature because archiving can involve retrieving deleted data, but in Azure Backup, archive tier is purely for cost optimization, not recovery of deleted items.
✗Availability zonesWrong answer — click to see why▾
Why this is wrong here
Availability zones protect against datacenter-level failures by distributing resources across zones, but they do not provide recovery of accidentally deleted backup items within a Recovery Services vault.
★ When this WOULD be the correct answer
In a question asking for a feature that ensures high availability and resilience for Azure resources (e.g., VMs) by replicating them across physically separate locations within a region, Availability zones would be the correct answer.
Why candidates choose this
Candidates may confuse 'availability' with 'recoverability' and assume that zones provide backup protection, not realizing that soft delete is the specific feature for recovering deleted backup items.
✗Private endpointWrong answer — click to see why▾
Why this is wrong here
Private endpoints provide secure connectivity to the Recovery Services vault over a private IP address, but they do not offer any protection or recovery for accidentally deleted backup items.
★ When this WOULD be the correct answer
An organization requires that all traffic to the Recovery Services vault must traverse a private network and not the public internet to meet compliance requirements. In this scenario, enabling a private endpoint would be the correct answer.
Why candidates choose this
Candidates may confuse private endpoints with a security or protection feature, assuming that restricting network access could prevent deletion or aid in recovery, but private endpoints do not affect backup item retention or deletion recovery.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Managed Identities for Azure Resources
Key term
Soft delete
A soft delete marks data as deleted without actually removing it from the database, allowing recovery if needed.
Key term
Recovery Services vault
A Recovery Services vault is a secure storage container in Microsoft Azure that holds backup data and replication settings for virtual machines, databases, and other cloud resources, enabling you to restore them if something goes wrong.
About these practice questions
One of 1,049 original AZ-104 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.