Compliance wants an off-account recoverable copy of the lock-photo storage account, not only a same-account recycle bin. Soft delete and versioning are already on. What should you configure next?
Select an answer to reveal the explanation.
Short Explanation
Soft delete is the account’s own recycle bin—handy, but still sitting in the same house. Azure Backup parks a recoverable copy somewhere else so a bad delete or ransomware day doesn’t wipe the only copy of the lock photos.
Full Explanation
Azure Storage threat protection includes soft delete, versioning, immutable storage, and backups. Soft delete and versioning protect against many accidental deletes inside the account, but compliance that needs an off-account recoverable copy should enable Azure Backup for blobs (operational and/or vaulted backup per current guidance). Laptop ZIP exports are not an official control, and turning off versioning weakens recovery options.