An organization is designing a cloud storage solution for a database application hosted on Azure Virtual Machines. The solution must satisfy the following requirements:
* The database transaction logs must be stored on a dedicated virtual disk that supports high IOPS and sub-millisecond latency.
* Database backups must be copied to a separate storage repository that can survive a primary Azure region outage.
* External auditors must be granted temporary, read-only access to specific backup blobs for up to 180 days, and this access must be immediately revocable in the event of a credential leak.
Which storage design should you recommend to meet these requirements?
- Store the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.Cevap
- BStore the transaction logs on Standard HDD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.
- CStore the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Locally Redundant Storage (LRS). Grant auditor access using Shared Access Signature (SAS) tokens associated with a Stored Access Policy.
- DStore the transaction logs on Premium SSD managed disks. Store the backups in a General Purpose v2 (GPv2) storage account configured with Geo-Redundant Storage (GRS). Grant auditor access using ad-hoc Shared Access Signature (SAS) tokens with a 180-day lifetime generated using the storage account key.
Cevap
Store the transaction logs on Premium SSD managed disks, store backups in a GRS storage account, and grant access using SAS tokens linked to a Stored Access Policy.
The correct option combines Premium SSD managed disks for high-performance transaction logging, Geo-Redundant Storage (GRS) to satisfy regional resilience requirements, and a Stored Access Policy to manage the lifecycle and immediate revocation of the SAS tokens granted to the external auditors.
Adım Adım Çözüm
Anahtar Kavram
Selecting appropriate disk tiers, storage redundancy options, and secure access delegation methods in Azure.
Tahmini Süre:1m 30s