Configure and Manage Backups (Recovery Services Vault)
MS Learn module: Protect your virtual machines by using Azure Backup (
learn.protect-virtual-machines-with-azure-backup) + Introduction to Azure Backup (learn.introduction-to-azure-backup). Learning objectives: identify scenarios Azure Backup covers; back up and restore an Azure VM using a Recovery Services vault and a backup policy.
Overview (why this module matters)
This module covers data protection: creating a Recovery Services vault, assigning backup policies, enabling Azure Backup on VMs (and other workloads), monitoring backup jobs, and performing restores — the practical “make sure nothing is lost” half of the path.
Units / lessons covered
- Describe Azure Backup’s scenarios & capabilities (VMs, files, SQL/SAP, on-prem, blobs, disks).
- Create a Recovery Services vault in a chosen region.
- Create/apply a backup policy (schedule + retention tiers).
- Enable VM backup, observe jobs, and perform a restore (as new VM / disk / alternate location).
Concepts introduced (link each term note)
- Azure Backup — the backup/restore service.
- Recovery Services vault — the encrypted store for backend data (backups + DR).
- Backup policy — schedule + retention governing backups.
- Azure VM — the primary workload protected; Azure Files shares also in scope.
Key terms / commands
- Create vault:
az backup vault create --name <vault> --resource-group <rg> - Enable backup:
az backup protection enable-for-vm --vm <vm> --policy-name <pol> - Create/update policy:
az backup policy create | list | update - Restore:
az backup restore restore-azurewl(or VM restore via portal/CLI); list points:az backup recoverypoint list.
Hands-on / what to try
- Create a Recovery Services vault and a daily backup policy (e.g. 30 daily days retention).
- Enable backup on a VM, confirm the first backup job succeeds, and inspect restore points.
- Restore the VM from a restore point to a new VM to verify end-to-end recovery.
Exam focus
- Vault + policy + protected VM = the backbone; know the create→enable→restore flow.
- Retention tiers (daily/weekly/monthly/yearly) and policy schedule are key facts.
- Backups are encrypted in the vault (platform or customer-managed key).
- Vault also hosts Site Recovery — be ready for the backup-vs-DR distinction (next module).
Related
Path MOC · azure-backup · recovery-services-vault · azure-backup-policy · Next: disaster recovery