Exam AZ-500 topic 5 question 50 discussion

Tested in lab, should be storage 1 and 2 only, need to be in the same region and premium file share is NOT supported

Yet another wrong answer from Exam Topics

1) The storage account must be in the same region as the SQL database. DB1 is in East US, so only storage accounts in East US are valid. 2) Standard or Premium is okay. However, for Premium, only Block blob accounts are supported for auditing. 3) File shares are not supported for Azure SQL auditing.

File share is not supported. If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region. https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql#audit-to-storage-destination

Ans should be Sto 1 and Sto 2. however there is no option available: https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql#storage-destination:~:text=Premium%20storage%20with%20BlockBlobStorage%20is%20supported.%20Standard%20storage%20is%20supported

East US 2 is a pair region so it should be allowed. Storage1 and Storage4

Explanation: When enabling Azure SQL Database Auditing, the audit logs must be stored in an Azure Storage account that meets specific requirements. Storage Account Requirements for SQL Auditing: Must be in the same region as the SQL database ✅ STORAGE1 (East US) → Allowed ❌ STORAGE4 (East US2) → Not Allowed (Different region) Must be a Standard Storage Account (Not Premium Blob or Premium File Share) ✅ STORAGE1 (Standard, East US) → Allowed ❌ STORAGE2 (Premium Block Blob, East US) → Not Allowed ❌ STORAGE3 (Premium File Share, East US) → Not Allowed

B only: Yes, if deployed from anywhere but the Azure portal, the region restriction does not apply. That's because the Azure portal UI strictly restricts access to the same region only. But if you take a look at the way the question was presented, it did look like PowerShell script, ARM template or even CLI which; all these programmatic ways can bypass that region restriction, Storage 1 and 2 only But since we only have storage 1, then that is the best choice. "If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region." https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql#audit-to-storage-destination

Could please somebody explain me why tons of people choose storage 3 if it is premium file shares and at the same time documentation says that only premium blobs supported?

The question is not stating from where the deployment is made. In the documentation states: Note If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region. https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql Answer = D. storage1, storage2, and storage3 only ( Assuming is from the portal )

In my opinion, answer should be Storage1 and Storage2. I couldn't find anywhere it can be stored to Fileshare (Storage2). And Storage4 is in different location.

D. storage1, storage2, and storage3 only

Should be storage1, storage2 and storage4. https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql#remarks Premium storage with BlockBlobStorage is supported. Standard storage is supported. However, for audit to write to a storage account behind a VNet or firewall, you must have a general-purpose v2 storage account. If you have a general-purpose v1 or Blob Storage account, upgrade to a general-purpose v2 storage account. https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql#audit-to-storage-destination If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region.

SQL Azure auditing can use standard accounts "Premium storage with BlockBlobStorage is supported. Standard storage is supported." https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql#remarks Also: "If you are deploying from the Azure portal, be sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region." https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql#audit-storage-destination that means everything in the list except for Azure File shares.

D. storage1, storage2, and storage3 only

Note we are on SQL DB (not SQL MI): https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql "If you are deploying from the Azure portal, be sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region." "Premium storage with BlockBlobStorage is supported. Standard storage is supported." So, I'd say it should be storage1, storage2 and storage4. (Which is not an option, though.)

Can it be stored in Premium File shares though?