Soru

Zorluk: Çok zorBlob, File, and Disk Storage Solutions

A company is designing the storage architecture for a health informatics application hosted on Azure Linux virtual machines. The design must meet the following requirements:

- The application requires a shared filesystem that is POSIX-compliant, supports concurrent read/write access from multiple VMs with sub-millisecond metadata latency, and can survive a datacenter zone outage.
- Database transaction logs must be stored on VM disk storage that guarantees sub-millisecond write latency and supports scaling IOPS and throughput dynamically without virtual machine deallocation.
- System audit logs must be stored in a WORM (Write Once, Read Many) state for seven years. External auditors must be granted access to these logs for exactly 30 days using a token that can be revoked immediately if a security compromise is suspected.

Which three storage configurations should you include in the design? (Select three.)

  1. Configure Azure Files Premium tier using the Network File System (NFS) protocol and Zone-Redundant Storage (ZRS).Cevap
  2. Deploy Premium SSD v2 disks for the database transaction logs and adjust performance settings dynamically as workload demands change.Cevap
  3. Configure Azure Blob Storage with a time-based retention policy, and generate a Service SAS linked to a Stored Access Policy for audit log access.Cevap
  4. D
    Deploy Standard SSD disks for the database transaction logs to minimize costs while maintaining transaction write performance.
  5. E
    Configure Azure Blob Storage with a time-based retention policy, and generate an ad-hoc SAS token signed with the storage account key for audit log access.
  6. F
    Configure Azure Files Standard tier using Locally-Redundant Storage (LRS) and mount the shares using SMB 3.0.

Cevap

Configure Azure Files Premium tier using NFS and ZRS; deploy Premium SSD v2 disks for database logs with dynamic performance tuning; and configure Azure Blob Storage with a time-based retention policy using a Service SAS linked to a Stored Access Policy.
To design the storage solutions optimally: First, Azure Files Premium using the NFS v4.1 protocol and ZRS satisfies the requirement for a zone-redundant, sub-millisecond POSIX-compliant shared filesystem on Linux. Second, Premium SSD v2 disks provide sub-millisecond write latency and support modifying IOPS and throughput online without deallocating the VM. Third, storing audit logs in Azure Blob Storage with a time-based retention policy satisfies WORM compliance, and generating a Service SAS linked to a Stored Access Policy permits revoking the 30-day token immediately by modifying or deleting the policy.

Adım Adım Çözüm

1
Analyze the shared filesystem requirement.
Identify that POSIX compliance on Linux VMs with sub-millisecond metadata latency requires Azure Files Premium tier mounted via NFS v4.1, and zone survivability requires ZRS redundancy.
Standard tier or SMB protocol fails to meet native POSIX/latency or redundancy requirements.
2
Evaluate the database transaction log disk requirement.
Select Premium SSD v2 (or Ultra Disk) since it supports sub-millisecond latencies and dynamic tuning of IOPS/throughput without deallocating the VM.
Standard SSD or Premium SSD v1 do not meet the performance tiering and online dynamic scaling needs.
3
Evaluate audit log immutability and delegation requirements.
Select Azure Blob Storage immutable storage with a time-based retention policy for WORM, and use a Service SAS associated with a Stored Access Policy.
Using a Stored Access Policy allows instantaneous revocation of the 30-day token, whereas ad-hoc SAS tokens require key rotation to revoke.

Anahtar Kavram

Selecting Azure storage services, disk tiers, redundancy levels, and access delegation mechanisms based on POSIX compliance, latency, write-intensity, dynamic performance scaling, WORM compliance, and token revocation requirements.
Bu soruyu puanla