Question

Difficulty: MediumBlob, File, and Disk Storage Solutions

An organization is designing the storage infrastructure for a multi-tier application suite running on Azure Virtual Machines. The solution must meet the following requirements:
- High-performance, shared storage for a Linux-based cluster that supports the NFS v4.1v4.1 protocol and remains available during a single zone outage.
- Disk storage for database virtual machines hosting transactional workloads that require sub-millisecond write response times and must survive zone-level failures.
- Secure, temporary access to application diagnostics logs stored in blob containers, with the ability to immediately revoke access if credentials are leaked.

Which three design decisions should you recommend to meet the requirements? (Select three.)

  1. Create an Azure Files Premium share configured with Zone-Redundant Storage (ZRS) for the shared file systemAnswer
  2. Deploy Premium SSD managed disks configured with Zone-Redundant Storage (ZRS) for the database virtual machinesAnswer
  3. Generate Shared Access Signature (SAS) tokens associated with a Stored Access Policy to grant access to the diagnostic logsAnswer
  4. D
    Deploy Standard HDD managed disks configured with Locally Redundant Storage (LRS) for the database virtual machines
  5. E
    Create an Azure Files Standard share configured with Locally Redundant Storage (LRS) for the shared file system
  6. F
    Generate ad-hoc Shared Access Signature (SAS) tokens with a five-year lifetime for access to the diagnostic logs

Answer

The architecture should use a Premium Azure Files share with Zone-Redundant Storage (ZRS) for the NFS v4.1v4.1 file system, Premium SSD managed disks with ZRS for the database virtual machines, and Shared Access Signatures associated with a Stored Access Policy for diagnostic logs.
The correct options are selected because: Premium Azure Files is the only Azure Files tier that supports NFS v4.1v4.1, and ZRS provides resiliency against zone outages. Premium SSD disks with ZRS provide the required sub-millisecond latencies and zone-level redundancy for transactional database workloads. Finally, using a SAS token with a Stored Access Policy allows immediate revocation of access to the diagnostics logs.

Step-by-Step Solution

1
Evaluate the shared file system requirements.
Premium Azure Files is required because the Standard tier does not support the NFS v4.1v4.1 protocol (which is restricted to the Premium tier). Additionally, Zone-Redundant Storage (ZRS) is required to ensure the shared files remain available during a zone outage, as Locally Redundant Storage (LRS) only replicates data within a single datacenter.
Ensures protocol compatibility and zone-level resiliency for the shared storage layer.
2
Evaluate the database disk storage requirements.
Premium SSD managed disks configured with ZRS meet both the sub-millisecond latency requirement for transactional workloads and the requirement to survive zone-level failures. Standard HDD disks have high latency and low IOPS, making them unsuitable for database transaction logs.
Selects the correct managed disk tier and redundancy option based on performance and availability needs.
3
Evaluate the diagnostics access security requirements.
Using SAS tokens associated with a Stored Access Policy allows the organization to revoke the SAS immediately by modifying or deleting the policy. Ad-hoc SAS tokens with long lifetimes cannot be easily revoked without rotating the storage account keys, which would disrupt all other clients using the keys.
Provides a secure access control mechanism with immediate revocation capabilities.

Key Concept

Selecting Azure storage services, performance tiers, redundancy options, and access security mechanisms based on protocol, latency, availability, and management requirements.
Rate this question