Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

Your company, named Contoso, Ltd., has a Microsoft Entra tenant named contoso.com that uses Privileged Identity Management (PIM) and is linked to an Azure subscription named Sub1.

You use Azure Backup to back up all the resources in Sub1 to a Recovery Services vault named Vault1.

An external company named Fabrikam, Inc. provides security management services to Contoso. Fabrikam has a Microsoft Entra tenant named fabrikam.com and an Azure subscription.

You need to prevent a compromised administrator account in contoso.com from modifying backup policies in and deleting backups from Sub1.

Solution: In Vault 1, you generate a security PIN for critical operations.

Does this meet the goal?