AZ-500 Question 161
Select 2You are overseeing a logging solution in Azure Blob Storage that must meet strict compliance requirements. All log data must be retained for a minimum of seven years, protected against any alteration or deletion during that period, and easily recoverable if accidentally overwritten. Which two features should you enable on your storage container to best meet these requirements?
- A
Enable soft delete for blobs only
- B
Enable versioning on the container
- C
Enable an immutable storage policy with a time-based retention
- D
Rely on the storage account’s replication for data durability
Show answer and explanation
Correct answers: B, C
Explanation
For strict compliance needs, such as retaining log data for seven years without the possibility of alteration, enabling Versioning and an immutable storage policy with a time-based retention is the most appropriate solution. Versioning helps recover previous iterations if a blob is unintentionally overwritten, while immutable storage enforces a write-once, read-many (WORM) state to prevent modifications or deletions until the retention period lapses. Soft delete, although useful for short-term accidental deletions, does not fulfill long-term immutability requirements on its own. Replication only protects against data center or hardware failures, not against overwrites or deletions. For more detailed guidance, refer to the official Azure documentation on 'Azure Storage: Configure Immutable Storage for Blobs' (https://learn.microsoft.com/azure/storage/blobs/storage-blob-immutable-storage).
- A. Incorrect.
Soft delete for blobs is useful for recovering recently deleted objects but does not provide a strict write-once, read-many (WORM) policy or satisfy long-term compliance requirements on its own. While it helps with accidental deletions, it does not guarantee data cannot be overwritten within the retention period.
- B. Correct.
Versioning ensures that if a blob is overwritten, an older version is maintained. This allows for recovery of previous versions, helping address accidental overwrites or modifications. It is an important layer for compliance and data protection.
- C. Correct.
An immutable storage policy with a time-based retention enforces a WORM setting for the specified duration. This prevents both accidental and intentional modifications or deletions during the retention period, which is critical for legal and regulatory compliance.
- D. Incorrect.
Replication enhances durability and availability of data by keeping multiple copies, but it does not prevent accidental or intentional edits or deletions. Replication alone does not satisfy compliance requirements that mandate immutability and a fixed retention duration.