Question

Difficulty: EasyBlob, File, and Disk Storage Solutions

You are designing a storage solution for a database application. You have the following requirements:
- The database transaction logs must be stored on virtual machine disks that support high IOPS and low latency.
- The database backup files must be stored in a storage account and must survive a datacenter zone failure in the primary region.
- Application servers must access the backups using a Shared Access Signature (SAS) token that remains valid for one year, with the ability to immediately revoke access if the token is compromised.

Which two configurations should you include in your design?

  1. Zone-redundant storage (ZRS) for the backup storage accountAnswer
  2. A stored access policy associated with the SAS token for backup accessAnswer
  3. C
    Locally redundant storage (LRS) for the backup storage account
  4. D
    An ad-hoc SAS token with a one-year lifetime configured without a stored access policy
  5. E
    Standard HDD managed disks for the database transaction logs

Answer

The correct configurations are Zone-redundant storage (ZRS) for the backup storage account and a stored access policy associated with the SAS token.
Zone-redundant storage (ZRS) replicates data synchronously across three availability zones in the primary region, ensuring the backups survive a zone failure. Additionally, associating the SAS token with a stored access policy allows you to revoke or change the permissions of the SAS token immediately by modifying or deleting the policy.

Step-by-Step Solution

1
Determine the redundancy type required to survive a datacenter zone failure.
Zone-redundant storage (ZRS) is selected.
ZRS replicates data across three separate availability zones within the primary region, whereas Locally Redundant Storage (LRS) is restricted to a single datacenter.
2
Determine the secure access method that allows token revocation.
A stored access policy is selected.
An ad-hoc SAS token cannot be revoked without rotating storage account keys, which affects all users. A stored access policy can be updated or deleted to revoke associated tokens immediately.
3
Evaluate disk type performance for database transaction logs.
Standard HDD is avoided; higher performance disk classes like Premium SSD or Ultra Disk are preferred.
Standard HDD disks are slow and do not meet the low-latency, high-IOPS requirement of database transaction logging.

Key Concept

Selecting Azure storage redundancy tiers, disk types, and SAS token revocation mechanisms based on application performance, durability, and security requirements.
Rate this question