Azure Backup

What it is

Azure Backup is Azure’s backup (data-protection) service. It takes secure, policy-driven backups (snapshots) of workloads — Azure VMs, on-premises servers (via MARS/MABS agents), SQL Server, Azure Files shares, and more — and stores them in a Recovery Services vault, from which you can restore.

Why it exists

Data loss protection for accidental deletion, corruption, or ransomware: you need reliable, retention-controlled, point-in-time copies you can restore on demand. Azure Backup provides managed, encrypted, off-server copies with a simple policy model — instead of scripting your own snapshot jobs.

Key ideas

  • Workloads: Azure VMs (VM backup), on-prem → Azure (MARS agent or MABS), Azure Files shares, SQL Server / SAP HANA in VMs, blobs, and (managed) disks.
  • Backup policy (Backup policy) defines what, when (schedule), and how long (retention) to back up — policy is applied via the vault.
  • VM backup flow: uses snapshots (instant restores) stored in the vault + transfers data; backed up to the vault with vault-encrypted storage.
  • Restore options: restore as a new VM, restore a disk, or restore to original/alternate location, from restore points.
  • Security: vault-level encryption, soft delete, and checks against accidental deletion.

How it fits (diagram)

azure-backup - Microsoft diagram

Diagrams courtesy of Microsoft Learn / Azure docs: backup/backup-overview

Exam notes

  • Azure Backup = back up / restore (data protection); Site Recovery = disaster recovery replication (know the distinction).
  • Backups are governed by a policy and land in a Recovery Services vault.
  • VM backup supports instant restore via app-consistent snapshots.
  • Vault must exist and a policy must be assigned before VM backups run.

recovery-services-vault · azure-backup-policy · azure-site-recovery · azure-vm · Home

📘 Source: Microsoft Learn — Azure Backup