Examkin

Soru

Zorluk: Çok zorBlob, File, and Disk Storage Solutions

You are designing the storage infrastructure for a hybrid high-performance computing (HPC) workload and database migration to Azure. The architecture must satisfy the following requirements:

* A shared file system must support POSIX-compliant permissions, concurrent access from multiple Linux-based virtual machines, and low-latency metadata operations. The file storage must survive an availability zone failure.
* A database transaction log store must support up to 15,00015,000 IOPS and 300 MB/s300\text{ MB/s} throughput with sub-millisecond latency. The database VM must be able to failover to another availability zone in the same region while preserving the disk contents without application-level replication.
* External applications must be granted access to specific blobs in a storage account. The access must expire after 2 hours and must be instantly revocable at any time without rotating the primary or secondary storage account keys.

Which three storage configurations should you include in the design?

  1. Azure Files Premium tier configured with the NFS v4.1 protocol and Zone-Redundant Storage (ZRS)Cevap
  2. B
    Azure Files Standard tier configured with the NFS v4.1 protocol and Locally Redundant Storage (LRS)
  3. Premium SSD managed disks configured with Zone-Redundant Storage (ZRS) for the database transaction logsCevap
  4. D
    Standard HDD managed disks configured with Locally Redundant Storage (LRS) for the database transaction logs
  5. A Shared Access Signature (SAS) token associated with a stored access policy for external applicationsCevap
  6. F
    A Shared Access Signature (SAS) token generated with a 2-hour validity period using storage account keys without a stored access policy

Cevap

The design must include Azure Files Premium tier with NFS v4.1 and ZRS, Premium SSD managed disks configured with ZRS, and a Shared Access Signature token associated with a stored access policy.
The correct design includes Premium Files with NFS v4.1 and ZRS for the Linux shared filesystem, Premium SSD with ZRS for the database logs, and a SAS token associated with a stored access policy for revocable blob access. NFS v4.1 on Premium Files satisfies POSIX compliance and zone-redundancy. Premium SSD with ZRS satisfies database performance needs and allows disk attachment across availability zones. A stored access policy enables instant revocation of SAS tokens without rotating storage account keys.

Adım Adım Çözüm

1
Evaluate the shared file system requirements: POSIX-compliance, concurrent Linux VM access, low-latency, and zonal redundancy.
Azure Files Premium tier is required because NFS v4.1 is only supported on Premium Files. NFS v4.1 provides POSIX-compliant permissions and concurrent access. To survive a zone failure, Zone-Redundant Storage (ZRS) must be used.
Standard tier does not support NFS, and LRS does not survive zone failure.
2
Evaluate the database transaction log store requirements: 15,00015,000 IOPS, 300 MB/s300\text{ MB/s} throughput, low latency, and cross-zone VM failover without application-level replication.
Premium SSD managed disks support ZRS and easily achieve the required performance (up to 20,000 IOPS and 900 MB/s throughput depending on size). By configuring ZRS, the disk is replicated across zones, allowing a database VM in another zone to attach to the same disk during failover.
Standard HDD lacks the performance capacity for transaction logs, and LRS would prevent attaching the disk in a different availability zone.
3
Evaluate the secure external access requirements: 2-hour duration, instant revocation without rotating primary/secondary storage account keys.
Define a stored access policy on the container, and generate a SAS token linked to this policy. To revoke access immediately, the stored access policy can be deleted or modified.
Ad-hoc SAS tokens cannot be revoked individually without key rotation, which affects all users of the storage account.

Anahtar Kavram

Designing high-performance, resilient, and secure storage in Azure using Azure Files Premium, ZRS managed disks, and SAS tokens with stored access policies.
Bu soruyu puanla

Konular

Blob, File, and Disk Storage Solutions

Bu konudan daha fazla soru