Examkin

Question

Difficulty: MediumBlob, File, and Disk Storage Solutions

You are designing the storage infrastructure for a SQL database migrating to Azure Virtual Machines. The database transaction logs require sub-10ms write latency and high IOPS. The storage solution for the database files must remain available even during an availability zone-level outage. Additionally, database backups must be written to Azure Blob Storage daily, and external auditors must be granted temporary access to these backups with the ability to immediately revoke the access if a security compromise is suspected. Which storage configuration should you recommend?

  1. Deploy Premium SSD managed disks with Zone-Redundant Storage (ZRS) for the transaction logs, and store backups in a ZRS block blob container accessed via Shared Access Signatures (SAS) associated with a stored access policy.Answer
  2. B
    Deploy Standard HDD managed disks with Zone-Redundant Storage (ZRS) for the transaction logs, and store backups in a ZRS block blob container accessed via Shared Access Signatures (SAS) associated with a stored access policy.
  3. C
    Deploy Premium SSD managed disks with Locally Redundant Storage (LRS) for the transaction logs, and store backups in an LRS block blob container accessed via Shared Access Signatures (SAS) associated with a stored access policy.
  4. D
    Deploy Premium SSD managed disks with Zone-Redundant Storage (ZRS) for the transaction logs, and store backups in a ZRS block blob container accessed via ad-hoc Shared Access Signatures (SAS) configured with a three-year expiration.

Answer

Deploy Premium SSD managed disks with Zone-Redundant Storage (ZRS) for the transaction logs, and store backups in a ZRS block blob container accessed via Shared Access Signatures (SAS) associated with a stored access policy.
The configuration using Premium SSD managed disks for database files guarantees the required write performance. Selecting Zone-Redundant Storage (ZRS) ensures the storage architecture survives a zone outage. Accessing the backups via a SAS linked to a stored access policy satisfies the security requirement by enabling immediate revocation without key rotation.

Step-by-Step Solution

1
Analyze performance requirements for the database transaction logs.
Premium SSD or Ultra Disk is required to achieve sub-10ms write latency and high IOPS. Standard HDD is insufficient for transaction log workloads.
Database transaction logs are write-intensive and highly sensitive to latency.
2
Analyze the high availability and resiliency requirements.
Zone-Redundant Storage (ZRS) must be selected for both managed disks and blob storage to survive a zone outage.
Locally Redundant Storage (LRS) only replicates data within a single datacenter and cannot survive a zone failure.
3
Analyze backup security and revocation requirements.
Access must be granted via a Shared Access Signature (SAS) linked to a stored access policy.
A stored access policy allows immediate revocation of SAS tokens by modifying or deleting the policy, whereas ad-hoc SAS tokens can only be revoked by rotating storage keys.

Key Concept

Azure storage performance tiers, redundancy options, and SAS token lifecycle management.
Rate this question

Topics

Blob, File, and Disk Storage Solutions

More questions from this topic