Azure Backup Cross-Region Restore (CRR) for Regional Failures
Your company uses Azure Backup to protect on-premises file servers and Azure VMs. The compliance team requires that backup data be stored in a secondary region to protect against regional disasters. Which Azure Backup feature should you enable?
⚠ Common exam trap
Test-takers frequently confuse Azure Site Recovery (which replicates workloads for failover) with Azure Backup's storage redundancy feature (which replicates backup data for durability), or they incorrectly assume that creating a vault in the secondary region alone provides cross-region backup storage.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable geo-redundant storage (GRS) for the Recovery Services vault
Azure Backup uses the Recovery Services vault as its management and storage container. By enabling geo-redundant storage (GRS) on the vault, backup data is automatically replicated to a paired secondary Azure region, meeting the compliance requirement for off-site disaster recovery without any additional configuration or separate vault.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable geo-redundant storage (GRS) for the Recovery Services vault
Why this is correct
Enabling geo-redundant storage (GRS) on the Recovery Services vault is the correct way to protect on-premises file backups against a regional disaster. GRS asynchronously replicates the vault's backup data to a paired Azure region, ensuring a second copy exists beyond the primary region's failure boundary. This replication is the built-in mechanism for making backup data resilient without requiring separate infrastructure or failover processes.
- ✗
Use Azure Site Recovery to replicate the backup data
Why it's wrong here
Azure Site Recovery (ASR) is a disaster recovery orchestration service that replicates source workloads—such as VMs or physical servers—to a secondary location for continuous replication and failover. It does not copy the backup data already stored in a Recovery Services vault, nor does it manage backup snapshots or their retention. ASR protects the live workload, not the backup archives, so it cannot satisfy the requirement to replicate backup data to a secondary region.
- ✗
Configure backup policies to back up directly to the secondary region
Why it's wrong here
Backup policies in Azure Backup only define the frequency and retention of recovery points for a given backup item; they do not include any destination-region selection. When a policy runs, backup data is always written to the Recovery Services vault that the backup item is registered to, and that vault resides in a specific primary region. The only way to get backup data into a secondary region is via storage-level replication (GRS) or explicit cross-region restore, not by configuring a policy to target another region.
- ✗
Use a Recovery Services vault in the secondary region
Why it's wrong here
Creating a separate Recovery Services vault in a secondary region does not automatically replicate any data from the primary vault. Each vault is an isolated management and storage container, and backups in the primary vault remain there unless a separate backup job is configured for the secondary vault or the primary vault's GRS replication is used to restore to that region. The vault's location merely determines its default storage placement; it provides no passive cross-region copy of the original vault's data.
Go deeper
Related to this question
Learn chapter
Key Vault Architecture for Secrets Management
Key term
Data Replication Strategy
A data replication strategy is a plan for copying and synchronizing data across multiple locations to ensure availability, durability, and performance.
Key term
Azure Backup Design
Azure Backup Design is the process of planning and configuring a reliable, cost-effective, and secure backup and recovery solution for workloads hosted in Microsoft Azure.
About these practice questions
This AZ-305 question is part of Courseiva's 795-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.