You are designing a storage solution for a database application. You have the following requirements:
- The database transaction logs must be stored on virtual machine disks that support high IOPS and low latency.
- The database backup files must be stored in a storage account and must survive a datacenter zone failure in the primary region.
- Application servers must access the backups using a Shared Access Signature (SAS) token that remains valid for one year, with the ability to immediately revoke access if the token is compromised.
Which two configurations should you include in your design?
- Zone-redundant storage (ZRS) for the backup storage accountAnswer
- A stored access policy associated with the SAS token for backup accessAnswer
- CLocally redundant storage (LRS) for the backup storage account
- DAn ad-hoc SAS token with a one-year lifetime configured without a stored access policy
- EStandard HDD managed disks for the database transaction logs
Answer
The correct configurations are Zone-redundant storage (ZRS) for the backup storage account and a stored access policy associated with the SAS token.
Zone-redundant storage (ZRS) replicates data synchronously across three availability zones in the primary region, ensuring the backups survive a zone failure. Additionally, associating the SAS token with a stored access policy allows you to revoke or change the permissions of the SAS token immediately by modifying or deleting the policy.
Step-by-Step Solution
Key Concept
Selecting Azure storage redundancy tiers, disk types, and SAS token revocation mechanisms based on application performance, durability, and security requirements.