-
AZ-104 – Review Mode Set 4 – Question 40 Inconsistency
-
Question:
You have an Azure storage named tutorialsdojo for hosting static assets. You have a user named Manila that uploads images to a blob container in tutorialsdojo.
You need to ensure that you satisfy the following requirements:
<ul data-indent-level=”1″>
Requirement 1: Only allow access from the specific public internet IP address of Manila.
Requirement 2: Data accidentally deleted must be recoverable 14 days after deletion.
Which two storage account features should you use to satisfy requirements?
Select the correct answer from the drop-down list of options. Each correct selection is worth one point.
<ul data-question_id=”12011″ data-type=”laq_jumbled_sentence”>
<strong data-renderer-mark=”true”>Requirement 1 – Selected Networking (right answer)
Requirement 2- Selected Data Protection – (Redundancy seems to be the right answer, but it’s not.)Explanation:
Under the networking tab, you can use IP network rules to allow access from specific public internet IP address ranges by creating IP network rules. Each storage account supports up to 200 rules. These rules grant access to specific internet-based services and on-premises networks and blocks general internet traffic.
You can use IP network rules to allow access from specific public internet IP address ranges by creating IP network rules. Each storage account supports up to 200 rules. These rules grant access to specific internet-based services and on-premises networks and blocks general internet traffic.
Under the data protection tab, soft delete protects your data from being accidentally or erroneously modified or deleted. When container soft delete is enabled for a storage account, a container, and its contents may be recovered after it has been deleted within a retention period that you specify.
Therefore, the correct answers are:
– Requirement 1 = Networking
– Requirement 2 = Data protection
Access Control is incorrect because Manila user can already upload images to the tutorialsdojo storage account. Access control or role-based access control (RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.
Redundancy is incorrect because you only need to protect data that have been accidentally deleted. Redundancy copies your data so that it is protected from transient hardware failures, network or power outages, and natural disasters.
Object replication is incorrect because this simply copies blobs asynchronously from a source storage account to a destination account. You only need to implement soft delete to satisfy the requirement.
Lifecycle management is incorrect because this just allows you to transition your data to the appropriate access tiers or expire at the end of the data’s lifecycle.
Please fix it.
Log in to reply.