Examkin

Question

Difficulty: MediumBlob, File, and Disk Storage Solutions

An organization is designing a cloud storage solution for a database application hosted on Azure Virtual Machines. The solution must satisfy the following requirements:

* The database transaction logs must be stored on a dedicated virtual disk that supports high IOPS and sub-millisecond latency.
* Database backups must be copied to a separate storage repository that can survive a primary Azure region outage.
* External auditors must be granted temporary, read-only access to specific backup blobs for up to 180 days, and this access must be immediately revocable in the event of a credential leak.

Which storage design should you recommend to meet these requirements?

  1. Store the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.Answer
  2. B
    Store the transaction logs on Standard HDD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.
  3. C
    Store the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Locally Redundant Storage (LRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.
  4. D
    Store the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using ad-hoc Shared Access Signature (SAS) tokens with a 180-day lifetime generated using the storage account key.

Answer

Store the transaction logs on Premium SSD managed disks, store backups in a GRS storage account, and grant access using SAS tokens linked to a Stored Access Policy.
The correct option combines Premium SSD managed disks for high-performance transaction logging, Geo-Redundant Storage (GRS) to satisfy regional resilience requirements, and a Stored Access Policy to manage the lifecycle and immediate revocation of the SAS tokens granted to the external auditors.

Step-by-Step Solution

1
Select the correct disk type for transaction logs.
Premium SSD managed disks.
Database transaction logs require consistent, low-latency performance with high IOPS. Premium SSD or Ultra disks are required; Standard HDD or Standard SSD disks do not meet this performance tier.
2
Select the redundancy tier for backup storage.
Geo-Redundant Storage (GRS).
To survive a regional disaster, storage must be replicated to a secondary region. GRS replicates data synchronously three times within the primary region and then asynchronously to a secondary region. LRS only protects against local hardware failures within a single datacenter.
3
Determine the secure access method for the temporary external auditors.
Shared Access Signature (SAS) associated with a Stored Access Policy.
An ad-hoc SAS cannot be revoked without rotating storage account keys, which affects all users. Associating the SAS with a Stored Access Policy allows revocation by changing the policy's expiration date or deleting the policy.

Key Concept

Selecting appropriate disk tiers, storage redundancy options, and secure access delegation methods in Azure.
Estimated Time:1m 30s
Rate this question

Topics

Blob, File, and Disk Storage Solutions

More questions from this topic