Your team wants every protected Azure VM in a vault to be backed up once each day and kept for 30 days. Which Recovery Services vault setting should you configure?

A diagnostic setting

Diagnostic settings collect logs and metrics, but they do not define backup schedules or retention rules for virtual machines.

A resource lock

A resource lock can prevent accidental deletion or changes, but it does not schedule backups or manage retention.

An action group

An action group is for alert notifications and automation responses, not for controlling backup frequency or retention.

What does this AZ-104 question test?

Read the scenario before looking for a memorised answer.

What is the correct answer to this question?

The correct answer is: A backup policy — A backup policy is the correct place to define the protection schedule and retention for Azure VM backups in a Recovery Services vault. It controls how often backups occur and how long the recovery points are kept. In this case, the organization wants a daily schedule with 30-day retention, which is exactly the kind of policy setting Azure Backup uses for standardized protection. Why others are wrong: Diagnostic settings are for telemetry export, not backup management. A resource lock protects resources from deletion or modification but does not schedule backups. An action group belongs to Azure Monitor and is used for notifications and automation, not retention or backup timing.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.