Explanation:
Box 1: Soft delete of backups
How to block intentional or unintentional deletion of backup data?
Enable Soft delete is enabled to protect backups from accidental or malicious deletes.
Soft delete is a useful feature that helps you deal with data loss. Soft delete retains backup data for 14 days, allowing the recovery of that backup item before it's permanently lost.
Box 2: Multi-user authorization by using Resource Guard
Ensure Multi-user authorization (MUA) is enabled for an additional layer of protection.
MUA for Azure Backup uses a new resource called Resource Guard to ensure critical operations, such as disabling soft delete, stopping and deleting backups, or reducing retention of backup policies, are performed only with applicable authorization.
Reference:
https://learn.microsoft.com/en-us/azure/backup/protect-backups-from-ransomware-faq