Mod07-Azure Storage

You work for an open source development company. You use Microsoft Azure for a variety of storage needs. Up to now, all the storage was used for internal purposes only. It is organized in block blobs. Each block blob is in its own container. Each container is set to default settings. In total, you have 50 block blobs.

The company has decided to provide read access to the data in the block blobs, as part of releasing more information about their open source development efforts. You need to reconfigure the storage to meet the following requirements:

* All block blobs must be readable by anonymous internet users.

You need to configure the storage to meet the requirements. What should you do? Select one.

• Create a new container, move all the blobs to the new container, and then set the public access level to Blob.

• Set the public access level to Blob on all the existing containers.

• Create a new shared access signature for the storage account and then set the allowed permissions to Read, set the allowed resource types to Object, and set the allowed services to Blob.

• Create a new access key for the storage account and then provide the connection string in the storage connectivity information to the public.

Your company is planning to storage log data, crash dump files, and other diagnostic data for Azure VMs in Azure. The company has issued the following requirements for the storage:

* Administrators must be able to browse to the data in File Explorer.

* Access over SMB 3.0 must be supported.

* The storage must support quotas.

You need to choose the storage type to meet the requirements. Which storage type should you use? Select one.

• Azure Files

• Table storage

• Blob storage

• Queue storage

Your company provides cloud software to audit administrative access in Microsoft Azure resources. The software logs all administrative actions (including all clicks and text input) to log files. The software is about to be released from beta and the company is concerned about storage performance. You need to deploy a storage solution for the log files to maximize performance. What should you do? Select one.

• Deploy Azure Files using SMB 3.0.

• Deploy Azure Table Storage.

• Deploy Azure Queues Storage.

• Deploy blob storage using block blobs.

• Deploy blob storage using append blobs.

Your company is building an app in Azure. The app has the following storage requirements:

* Storage must be reachable programmatically through a REST API.

* Storage must be globally redundant.

* Storage must be accessible privately within the company's Azure environment.

* Storage must be optimal for unstructured data.

Which type of Azure storage should you use for the app? Select one.

• Azure Data Lake store

• Azure Table Storage

• Azure Blob Storage

• Azure File Storage

You use a Microsoft Azure storage account for storing large numbers of video and audio files. You create containers to store each type of file and want to limit access to those files for specific periods. Additionally, the files can only be accessed through shared access signatures (SAS).

You need the ability to revoke access to the files and to change the period for which users can access the files. What should you do in order to accomplish this in the most simple and effective way? Select one.

• Create an SAS for each user and delete the SAS when you want to prevent access.

• Use Azure Rights Management Services (RMS) to control access to each file.

• Implement stored access policies for each container to enable revocation of access or change of duration.

• Periodically regenerate the account key to control access to the files.

You need to provide a contingent staff employee temporary read-only access to the contents of an Azure storage account container named media. It is important that you grant access while adhering to the security principle of least-privilege. What should you do? Select one.

• Set the public access level to Container.

• Generate a shared access signature (SAS) token for the container.

• Share the container entity tag (Etag) with the contingent staff member.

• Configure a Cross-Origin Resource Sharing (CORS) rule for the storage account.

You are using blob storage. Which of the following is true? Select one.

• The cool access tier is for frequent access of objects in the storage account.

• The hot access tier is for storing large amounts of data that is infrequently accessed.

• The performance tier you select does not affect pricing.

• You can switch between hot and cool performance tiers at any time.

You are planning a delegation model for your Azure storage. The company has issued the following requirements for Azure storage access:

* Apps in the non-production environment must have automated time-limited access

* Apps in the production environment must have unrestricted access to storage resources

You need to configure storage access to meet the requirements. What should you do? (Each answer presents part of the solution. Select two.

• Use shared access signatures for the non-production apps.

• Use shared access signatures for the production apps.

• Use access keys for the non-production apps.

• Use access keys for the production apps.

• Use Stored Access Policies for the production apps.

Your company has a file server named FS01. The server has a single shared folder that users' access to shared files. The company wants to make the same files available from Microsoft Azure. The company has the following requirements:

* Microsoft Azure should maintain the exact same data as the shared folder on FS01.

* Files deleted on either side (on-premises or cloud) shall be subsequently and automatically deleted from the other side (on-premises or cloud).

You need to implement a solution to meet the requirements. What should you do? Select one.

• Deploy DFS Namespaces.

• Install and use AZCopy.

• Deploy Azure File Sync.

• Install and use Azure Storage Explorer.

• Deploy storage tiering.

Which of the following replicates your data to a secondary region, maintains six copies of your data, and is the default replication option. Select one.

• Locally-redundant storage

• Geo-redundant storage

• Read-access geo-redundant storage

• Zone-redundant storage