An enterprise is migrating a high-throughput transactional database workload to Azure Virtual Machines. The database storage architecture must satisfy the following requirements:
- The database transaction logs require consistent sub-millisecond write response times and high IOPS.
- The storage infrastructure must survive a localized datacenter (zone) failure within the primary region without data loss.
- Backup files containing database exports must be stored securely and made accessible to external auditors via a HTTPS URL for exactly seven days, with the capability to immediately revoke access if a security anomaly is detected.
Which storage and access configuration should you recommend to meet these requirements?
- Configure the transaction logs on Ultra Disk or Premium SSD v2 managed disks using Zone-Redundant Storage (ZRS). Store the backup files in an Azure Blob storage container with Zone-Redundant Storage (ZRS), and grant the auditors access using a Shared Access Signature (SAS) associated with a stored access policy.Cevap
- BConfigure the transaction logs on Standard SSD managed disks using Zone-Redundant Storage (ZRS). Store the backup files in an Azure Blob storage container with Zone-Redundant Storage (ZRS), and grant the auditors access using a Shared Access Signature (SAS) associated with a stored access policy.
- CConfigure the transaction logs on Ultra Disk or Premium SSD v2 managed disks using Locally Redundant Storage (LRS). Store the backup files in an Azure Blob storage container with Locally Redundant Storage (LRS), and grant the auditors access using a Shared Access Signature (SAS) associated with a stored access policy.
- DConfigure the transaction logs on Ultra Disk or Premium SSD v2 managed disks using Zone-Redundant Storage (ZRS). Store the backup files in an Azure Blob storage container with Zone-Redundant Storage (ZRS), and grant the auditors access using an ad-hoc Shared Access Signature (SAS) token configured with a seven-day expiration.
Cevap
Configure the transaction logs on Ultra Disk or Premium SSD v2 managed disks using Zone-Redundant Storage (ZRS). Store the backup files in an Azure Blob storage container with Zone-Redundant Storage (ZRS), and grant the auditors access using a Shared Access Signature (SAS) associated with a stored access policy.
The correct configuration uses Ultra Disk or Premium SSD v2 managed disks with Zone-Redundant Storage (ZRS) for the transaction logs, meeting the sub-millisecond latency and zone-redundancy requirements. For the backup files, Azure Blob storage with Zone-Redundant Storage (ZRS) provides the necessary resilience, and utilizing a Shared Access Signature (SAS) linked to a stored access policy allows the access to be immediately revoked by modifying or deleting the policy.
Adım Adım Çözüm
Anahtar Kavram
Designing high-performance, zone-resilient disk storage and securing Azure Blob storage using revocable access methods (Stored Access Policies).