Exam AZ-304 All Questions

View all questions & answers for the AZ-304 exam

Exam AZ-304 topic 4 question 2 discussion

Actual exam question from Microsoft's AZ-304

Question #: 2
Topic #: 4

You have an Azure Storage v2 account named storage1.
You plan to archive data to storage1.
You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.
What should you do?

A. You create an Azure Blob storage container, and you configure a legal hold access policy.
B. You create a file share and snapshots.
C. You create a file share, and you configure an access policy.
D. You create an Azure Blob storage container, and you configure a time-based retention policy and lock the policy.

Show Suggested Answer

Suggested Answer: D 🗳️
Time-based retention policy support: Users can set policies to store data for a specified interval. When a time-based retention policy is set, blobs can be created and read, but not modified or deleted. After the retention period has expired, blobs can be deleted but not overwritten.
Note:
Immutable storage for Azure Blob storage enables users to store business-critical data objects in a WORM (Write Once, Read Many) state. This state makes the data non-erasable and non-modifiable for a user-specified interval. For the duration of the retention interval, blobs can be created and read, but cannot be modified or deleted. Immutable storage is available for general-purpose v2 and Blob storage accounts in all Azure regions.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage

by KumarPV at Dec. 11, 2020, 3:38 a.m.

Comments

Submit Cancel

KumarPV

Highly Voted 4 years, 6 months ago

Agreed. D is right answer

upvoted 55 times

...

moota

Highly Voted 4 years, 1 month ago

> Time-based retention policy support: Users can set policies to store data for a specified interval. When a time-based retention policy is set, blobs can be created and read, but not modified or deleted. After the retention period has expired, blobs can be deleted but not overwritten. > Legal hold policy support: If the retention interval is not known, users can set legal holds to store immutable data until the legal hold is cleared. When a legal hold policy is set, blobs can be created and read, but not modified or deleted. Each legal hold is associated with a user-defined alphanumeric tag (such as a case ID, event name, etc.) that is used as an identifier string.

upvoted 28 times

rdemontis

3 years, 6 months ago

thanks for the clear explanation!

upvoted 1 times

...

Dawn7

Most Recent 3 years, 3 months ago

Selected Answer: D

Yes, D looks right

upvoted 1 times

...

[Removed]

3 years, 3 months ago

Selected Answer: D

Correct answer

upvoted 1 times

...

sharepoint_Azure_pp

3 years, 8 months ago

Option D is most appropiate choose the same cleared with 900 on 17th October 2021

upvoted 6 times

...

syu31svc

3 years, 8 months ago

Provided link supports answer given

upvoted 1 times

...

poplovic

3 years, 8 months ago

Some explanation to justify correct answer D. The time-based retention policy can be locked and after it is locked, you/admin can not remove the lock. you/admin can only extend (at most 5 times) the retention peroid. Therefore, to achieve the goal "prevent admin from deleting the data", the lock is a must. You need to read the deep shit here https://docs.microsoft.com/en-us/azure/storage/blobs/immutable-time-based-retention-policy-overview#locked-versus-unlocked-policies

upvoted 3 times

...

Gautam1985

3 years, 9 months ago

correct

upvoted 1 times

...

ruslan_bespalov_netconomy

4 years, 2 months ago

The question is a bit ambiguous - there are two different retention policies for blobs. One is the immutable blob storage retention policy - https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutability-policies-manage?tabs=azure-portal. Second is the Soft-delete retention policy and it does not help in this case - https://docs.microsoft.com/en-us/azure/storage/blobs/soft-delete-blob-enable?tabs=azure-portal . The Answer D does not clarify which of these is used. I'm not sure it's possible to lock the soft-delete policy though.

upvoted 1 times

...