Merge pull request #178029 from v-amallick/Oct-29-2021-Hybrid

Backup Hybrid security updates

Author: PMEds28

articles/backup/backup-azure-security-feature.md

@@ -3,7 +3,10 @@ title: Security features that protect hybrid backups
 description: Learn how to use security features in Azure Backup to make backups more secure
 ms.reviewer: utraghuv
 ms.topic: conceptual
-ms.date: 04/26/2021
+ms.date: 11/02/2021
+author: v-amallick
+ms.service: backup
+ms.author: v-amallick
 ---
 # Security features to help protect hybrid backups that use Azure Backup
 
@@ -14,15 +17,18 @@ Concerns about security issues, like malware, ransomware, and intrusion, are inc
 - **Recovery**. Deleted backup data is retained for an additional 14 days from the date of the deletion. This ensures recoverability of the data within a given time period, so there's no data loss even if an attack happens. Also, a greater number of minimum recovery points are maintained to guard against corrupt data.
 
 > [!NOTE]
-> Security features shouldn't be enabled if you're using infrastructure as a service (IaaS) VM backup. These features aren't yet available for IaaS VM backup, so enabling them won't have any impact. Security features should be enabled only if you're using: <br/>
->
-> - **Azure Backup agent**. Minimum agent version 2.0.9052. After you've enabled these features, you should upgrade to this agent version to perform critical operations. <br/>
-> - **Azure Backup Server**. Minimum Azure Backup agent version 2.0.9052 with Azure Backup Server update 1. <br/>
-> - **System Center Data Protection Manager**. Minimum Azure Backup agent version 2.0.9052 with Data Protection Manager 2012 R2 UR12 or Data Protection Manager 2016 UR2. <br/>
+> These features are available only for Recovery Services vault. All the newly created Recovery Services vaults have these features enabled by default. For existing Recovery Services vaults, users enable these features by using the steps mentioned in the following section. After the features are enabled, they apply to all the Recovery Services agent computers, Azure Backup Server instances, and Data Protection Manager servers registered with the vault.
 
-> [!NOTE]
-> These features are available only for Recovery Services vault. All the newly created Recovery Services vaults have these features enabled by default. For existing Recovery Services vaults, users enable these features by using the steps mentioned in the following section. After the features are enabled, they apply to all the Recovery Services agent computers, Azure Backup Server instances, and Data Protection Manager servers registered with the vault. Enabling this setting is a one-time action, and you can't disable these features after enabling them.
->
+## Minimum version requirements
+
+Enable the security features only if you're using:
+
+- **Azure Backup agent**: Minimum agent version _2.0.9052_. After you enable these features, upgrade the  agent version to perform critical operations.
+- **Azure Backup Server**: Minimum Azure Backup agent version _2.0.9052_ with _Azure Backup Server update 1_.
+- **System Center Data Protection Manager**: Minimum Azure Backup agent version _2.0.9052_ with _Data Protection Manager 2012 R2 UR12_/ _Data Protection Manager 2016 UR2_.
+
+>[!Note]
+>Ensure that you don’t enable the security features if you're using infrastructure as a service (IaaS) VM backup. Currently, these features aren't available for IaaS VM backup and thus, enabling them won't have an impact.
 
 ## Enable security features