connection diagnostics test reachability and help identify where a network path fails. In this case, a service owner needs ongoing network connection availability measurements between two endpoints. “Network Watcher Connection troubleshoot or Connection monitor” would not satisfy that requirement; the supported action is “Connection monitor with suitable endpoints and tests”. Connection monitor continuously tests and records network connectivity rather than taking one-time snapshots.

resource insights surface relevant storage telemetry without manually assembling every chart. In this case, a service owner needs ongoing network connection availability measurements between two endpoints. “Azure Monitor storage insights or the storage account's Metrics views” would not satisfy that requirement; the supported action is “Connection monitor with suitable endpoints and tests”. Connection monitor continuously tests and records network connectivity rather than taking one-time snapshots.

iP flow verify evaluates whether an applicable NSG security rule permits or denies an example flow. In this case, a service owner needs ongoing network connection availability measurements between two endpoints. “Network Watcher IP flow verify on the target interface” would not satisfy that requirement; the supported action is “Connection monitor with suitable endpoints and tests”. Connection monitor continuously tests and records network connectivity rather than taking one-time snapshots.

resource insights surface relevant storage telemetry without manually assembling every chart. In this case, an analyst needs to examine latency after a VM platform change. “Azure Monitor storage insights or the storage account's Metrics views” would not satisfy that requirement; the supported action is “Time-aligned VM metrics, application logs and network diagnostics”. Correlating multiple signals distinguishes compute saturation from network path degradation.

connection diagnostics test reachability and help identify where a network path fails. In this case, an analyst needs to examine latency after a VM platform change. “Network Watcher Connection troubleshoot or Connection monitor” would not satisfy that requirement; the supported action is “Time-aligned VM metrics, application logs and network diagnostics”. Correlating multiple signals distinguishes compute saturation from network path degradation.

iP flow verify evaluates whether an applicable NSG security rule permits or denies an example flow. In this case, an analyst needs to examine latency after a VM platform change. “Network Watcher IP flow verify on the target interface” would not satisfy that requirement; the supported action is “Time-aligned VM metrics, application logs and network diagnostics”. Correlating multiple signals distinguishes compute saturation from network path degradation.

correlating multiple signals distinguishes compute saturation from network path degradation. In this case, an enterprise reports that Azure Monitor shows VM disk space but not expected app custom metrics. “Time-aligned VM metrics, application logs and network diagnostics” would not satisfy that requirement; the supported action is “Whether the application emits those custom measurements and collection is configured”. Azure Monitor cannot graph custom telemetry that has not been instrumented or ingested.

route diagnostics expose the next hop Azure selects for a destination. In this case, an enterprise reports that Azure Monitor shows VM disk space but not expected app custom metrics. “Network Watcher next hop or NIC effective routes” would not satisfy that requirement; the supported action is “Whether the application emits those custom measurements and collection is configured”. Azure Monitor cannot graph custom telemetry that has not been instrumented or ingested.

resource insights surface relevant storage telemetry without manually assembling every chart. In this case, an enterprise reports that Azure Monitor shows VM disk space but not expected app custom metrics. “Azure Monitor storage insights or the storage account's Metrics views” would not satisfy that requirement; the supported action is “Whether the application emits those custom measurements and collection is configured”. Azure Monitor cannot graph custom telemetry that has not been instrumented or ingested.

disk backup is a supported data-source-specific service using Backup vault resources. In this case, a company needs centralized protection for Azure VMs using a vault and scheduled policies. “Azure Disk Backup with a Backup vault and suitable policy” would not satisfy that requirement; the supported action is “A Recovery Services vault for Azure VM backup”. Recovery Services vaults manage Azure VM protection and recovery points under backup policies.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, a company needs centralized protection for Azure VMs using a vault and scheduled policies. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “A Recovery Services vault for Azure VM backup”. Recovery Services vaults manage Azure VM protection and recovery points under backup policies.

replication provides copies but does not replace an explicit VM backup policy and recovery points. In this case, a company needs centralized protection for Azure VMs using a vault and scheduled policies. “Storage replication and Azure VM backup protection are separate services” would not satisfy that requirement; the supported action is “A Recovery Services vault for Azure VM backup”. Recovery Services vaults manage Azure VM protection and recovery points under backup policies.

recovery Services vaults manage Azure VM protection and recovery points under backup policies. In this case, an administrator must protect Azure managed disks with a service feature that uses a Backup vault. “A Recovery Services vault for Azure VM backup” would not satisfy that requirement; the supported action is “Azure Disk Backup with a Backup vault and suitable policy”. Disk backup is a supported data-source-specific service using Backup vault resources.

backup cost depends on protected instances and stored recovery data, not simply the vault name. In this case, an administrator must protect Azure managed disks with a service feature that uses a Backup vault. “Vault storage redundancy, retention policy and protected instance inventory” would not satisfy that requirement; the supported action is “Azure Disk Backup with a Backup vault and suitable policy”. Disk backup is a supported data-source-specific service using Backup vault resources.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, an administrator must protect Azure managed disks with a service feature that uses a Backup vault. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “Azure Disk Backup with a Backup vault and suitable policy”. Disk backup is a supported data-source-specific service using Backup vault resources.

recovery Services vaults manage Azure VM protection and recovery points under backup policies. In this case, a VM backup plan is being designed and someone proposes using a random storage account as the policy container. “A Recovery Services vault for Azure VM backup” would not satisfy that requirement; the supported action is “A supported Azure Backup vault resource for the chosen workload”. Azure Backup vaults centralize protection, policies and recoverability for eligible data sources.

disk backup is a supported data-source-specific service using Backup vault resources. In this case, a VM backup plan is being designed and someone proposes using a random storage account as the policy container. “Azure Disk Backup with a Backup vault and suitable policy” would not satisfy that requirement; the supported action is “A supported Azure Backup vault resource for the chosen workload”. Azure Backup vaults centralize protection, policies and recoverability for eligible data sources.

backup durability depends on supported vault redundancy and workload behavior, not a generic assumption. In this case, a VM backup plan is being designed and someone proposes using a random storage account as the policy container. “The chosen vault's supported backup storage redundancy and restore architecture” would not satisfy that requirement; the supported action is “A supported Azure Backup vault resource for the chosen workload”. Azure Backup vaults centralize protection, policies and recoverability for eligible data sources.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, an organization requires vault data to persist after a single region failure. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “The chosen vault's supported backup storage redundancy and restore architecture”. Backup durability depends on supported vault redundancy and workload behavior, not a generic assumption.

backup cost depends on protected instances and stored recovery data, not simply the vault name. In this case, an organization requires vault data to persist after a single region failure. “Vault storage redundancy, retention policy and protected instance inventory” would not satisfy that requirement; the supported action is “The chosen vault's supported backup storage redundancy and restore architecture”. Backup durability depends on supported vault redundancy and workload behavior, not a generic assumption.

disk backup is a supported data-source-specific service using Backup vault resources. In this case, an organization requires vault data to persist after a single region failure. “Azure Disk Backup with a Backup vault and suitable policy” would not satisfy that requirement; the supported action is “The chosen vault's supported backup storage redundancy and restore architecture”. Backup durability depends on supported vault redundancy and workload behavior, not a generic assumption.

vault-protection items indicate whether backup policy and recovery points exist for the VM. In this case, a backup administrator needs to prevent easy deletion of protected recovery data. “The VM's backup status and protection item in the selected vault” would not satisfy that requirement; the supported action is “Vault soft delete and supported protection/security features”. Vault security features can preserve recoverability after accidental or malicious deletion attempts.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, a backup administrator needs to prevent easy deletion of protected recovery data. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “Vault soft delete and supported protection/security features”. Vault security features can preserve recoverability after accidental or malicious deletion attempts.

backup durability depends on supported vault redundancy and workload behavior, not a generic assumption. In this case, a backup administrator needs to prevent easy deletion of protected recovery data. “The chosen vault's supported backup storage redundancy and restore architecture” would not satisfy that requirement; the supported action is “Vault soft delete and supported protection/security features”. Vault security features can preserve recoverability after accidental or malicious deletion attempts.

Azure VM backup commonly uses Recovery Services vault rather than the disk-backup vault model. In this case, a VM team asks which vault should hold backup metadata for their regional VM estate. “A Backup vault dedicated to Azure Disk Backup only” would not satisfy that requirement; the supported action is “Use a supported regional Recovery Services vault appropriate to the protected VM region”. Backup vault and protected workload placement have supported regional and data-source constraints.

Plain storage does not supply the supported Azure VM backup management and recovery point policies. In this case, a VM team asks which vault should hold backup metadata for their regional VM estate. “An arbitrary storage account with no backup service policy” would not satisfy that requirement; the supported action is “Use a supported regional Recovery Services vault appropriate to the protected VM region”. Backup vault and protected workload placement have supported regional and data-source constraints.

Disaster recovery replication is not equivalent to VM backup data retention. In this case, a VM team asks which vault should hold backup metadata for their regional VM estate. “A Site Recovery replication policy without an Azure Backup vault” would not satisfy that requirement; the supported action is “Use a supported regional Recovery Services vault appropriate to the protected VM region”. Backup vault and protected workload placement have supported regional and data-source constraints.

disk backup is a supported data-source-specific service using Backup vault resources. In this case, a compliance administrator wants backup changes separated from ordinary VM administration. “Azure Disk Backup with a Backup vault and suitable policy” would not satisfy that requirement; the supported action is “Narrowly scoped Azure Backup roles on the relevant vault”. Backup administrative permissions can be delegated without granting broad VM or subscription Owner access.

recovery Services vaults manage Azure VM protection and recovery points under backup policies. In this case, a compliance administrator wants backup changes separated from ordinary VM administration. “A Recovery Services vault for Azure VM backup” would not satisfy that requirement; the supported action is “Narrowly scoped Azure Backup roles on the relevant vault”. Backup administrative permissions can be delegated without granting broad VM or subscription Owner access.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, a compliance administrator wants backup changes separated from ordinary VM administration. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “Narrowly scoped Azure Backup roles on the relevant vault”. Backup administrative permissions can be delegated without granting broad VM or subscription Owner access.

disk backup is a supported data-source-specific service using Backup vault resources. In this case, an engineer must check whether a VM is protected by a backup policy. “Azure Disk Backup with a Backup vault and suitable policy” would not satisfy that requirement; the supported action is “The VM's backup status and protection item in the selected vault”. Vault-protection items indicate whether backup policy and recovery points exist for the VM.

vault security features can preserve recoverability after accidental or malicious deletion attempts. In this case, an engineer must check whether a VM is protected by a backup policy. “Vault soft delete and supported protection/security features” would not satisfy that requirement; the supported action is “The VM's backup status and protection item in the selected vault”. Vault-protection items indicate whether backup policy and recovery points exist for the VM.

azure Backup vaults centralize protection, policies and recoverability for eligible data sources. In this case, an engineer must check whether a VM is protected by a backup policy. “A supported Azure Backup vault resource for the chosen workload” would not satisfy that requirement; the supported action is “The VM's backup status and protection item in the selected vault”. Vault-protection items indicate whether backup policy and recovery points exist for the VM.