Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Immutability places a time-based retention lock on a Recovery Services vault. During the specified retention period (10-99 years or a shorter test period), backup data cannot be altered or deleted-even by users who have Owner or Contributor permissions on the vault. Restores are still possible. Soft delete only protects for 14 days and can be turned off, customer-managed encryption keys secure data at rest but do not prevent deletion, and cross-region restore provides availability in another region but offers no deletion protection. Therefore, enabling immutability with a 180-day retention lock is the only option that satisfies the requirement.