Microsoft AZ-104 Azure Storage Redundancy and Encryption Practice Test

 

Topic 06 focuses on Storage Accounts, Redundancy, Encryption, and Object Replication for the Microsoft Certified: Azure Administrator Associate certification and the AZ-104 exam, using Microsoft Azure administration scenarios. For broader exam preparation, review the Microsoft Azure Administrator AZ-104 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

To host general Azure Storage workloads with broad feature support, which Azure configuration should be selected?

1. Blob object replication
2. General-purpose v2 storage account
3. Locally redundant storage (LRS)
4. Object replication prerequisites

Correct Answer: B

 

Correct Answer

Answer B is correct because General-purpose v2 storage account is the standard Azure Storage account type that supports Blob, Files, Queue, and Table services and current storage features. It directly supports the requirement to host general Azure Storage workloads with broad feature support.

Incorrect Answers

Answer A is incorrect because Blob object replication is used to copy blob changes across storage accounts for distribution or resilience scenarios; it does not provide the capability described in the scenario.

Answer C is incorrect because Locally redundant storage (LRS) is used to provide low-cost local durability without protection from a datacenter-level regional location failure; it does not provide the capability described in the scenario.

Answer D is incorrect because Object replication prerequisites is used to prepare storage accounts so Azure can track and replicate object changes correctly; it does not provide the capability described in the scenario.

 

Question 2

For General-purpose v2 storage account, which administrative outcome is expected?

1. Copy blob changes across storage accounts for distribution or resilience scenarios
2. Host general Azure Storage workloads with broad feature support
3. Allow read access to the secondary-region copy while asynchronous geo-replication remains enabled
4. Provide low-cost local durability without protection from a datacenter-level regional location failure

Correct Answer: B

 

Correct Answer

Answer B is correct because General-purpose v2 storage account is the standard Azure Storage account type that supports Blob, Files, Queue, and Table services and current storage features. Its intended administrative use is to host general Azure Storage workloads with broad feature support.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Blob object replication, which is used to copy blob changes across storage accounts for distribution or resilience scenarios; it is not the primary purpose of General-purpose v2 storage account.

Answer C is incorrect because that outcome belongs to Read-access geo-redundant storage (RA-GRS), which is used to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled; it is not the primary purpose of General-purpose v2 storage account.

Answer D is incorrect because that outcome belongs to Locally redundant storage (LRS), which is used to provide low-cost local durability without protection from a datacenter-level regional location failure; it is not the primary purpose of General-purpose v2 storage account.

 

Question 3

To provide low-cost local durability without protection from a datacenter-level regional location failure, which Azure configuration should be selected?

1. Locally redundant storage (LRS)
2. Zone-redundant storage (ZRS)
3. Infrastructure encryption
4. Microsoft-managed encryption keys

Correct Answer: A

 

Correct Answer

Answer A is correct because Locally redundant storage (LRS) is redundancy that keeps multiple synchronous copies of data within a single physical datacenter in the primary region. It directly supports the requirement to provide low-cost local durability without protection from a datacenter-level regional location failure.

Incorrect Answers

Answer B is incorrect because Zone-redundant storage (ZRS) is used to protect data from a single availability-zone failure within the primary region; it does not provide the capability described in the scenario.

Answer C is incorrect because Infrastructure encryption is used to provide double encryption at rest for workloads with stricter encryption requirements; it does not provide the capability described in the scenario.

Answer D is incorrect because Microsoft-managed encryption keys is used to encrypt stored data without requiring the customer to manage key lifecycle; it does not provide the capability described in the scenario.

 

Question 4

For Locally redundant storage (LRS), which administrative outcome is expected?

1. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
2. Add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover
3. Prepare storage accounts so Azure can track and replicate object changes correctly
4. Provide low-cost local durability without protection from a datacenter-level regional location failure

Correct Answer: D

 

Correct Answer

Answer D is correct because Locally redundant storage (LRS) is redundancy that keeps multiple synchronous copies of data within a single physical datacenter in the primary region. Its intended administrative use is to provide low-cost local durability without protection from a datacenter-level regional location failure.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Locally redundant storage (LRS).

Answer B is incorrect because that outcome belongs to Geo-redundant storage (GRS), which is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it is not the primary purpose of Locally redundant storage (LRS).

Answer C is incorrect because that outcome belongs to Object replication prerequisites, which is used to prepare storage accounts so Azure can track and replicate object changes correctly; it is not the primary purpose of Locally redundant storage (LRS).

 

Question 5

To protect data from a single availability-zone failure within the primary region, which Azure configuration should be selected?

1. Object replication prerequisites
2. Geo-redundant storage (GRS)
3. Zone-redundant storage (ZRS)
4. Customer-managed keys

Correct Answer: C

 

Correct Answer

Answer C is correct because Zone-redundant storage (ZRS) is redundancy that synchronously copies data across availability zones in the primary region. It directly supports the requirement to protect data from a single availability-zone failure within the primary region.

Incorrect Answers

Answer A is incorrect because Object replication prerequisites is used to prepare storage accounts so Azure can track and replicate object changes correctly; it does not provide the capability described in the scenario.

Answer B is incorrect because Geo-redundant storage (GRS) is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it does not provide the capability described in the scenario.

Answer D is incorrect because Customer-managed keys is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it does not provide the capability described in the scenario.

 

Question 6

For Zone-redundant storage (ZRS), which administrative outcome is expected?

1. Protect data from a single availability-zone failure within the primary region
2. Provide both zone resilience and a readable geo-replicated secondary copy
3. Copy blob changes across storage accounts for distribution or resilience scenarios
4. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption

Correct Answer: A

 

Correct Answer

Answer A is correct because Zone-redundant storage (ZRS) is redundancy that synchronously copies data across availability zones in the primary region. Its intended administrative use is to protect data from a single availability-zone failure within the primary region.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Read-access geo-zone-redundant storage (RA-GZRS), which is used to provide both zone resilience and a readable geo-replicated secondary copy; it is not the primary purpose of Zone-redundant storage (ZRS).

Answer C is incorrect because that outcome belongs to Blob object replication, which is used to copy blob changes across storage accounts for distribution or resilience scenarios; it is not the primary purpose of Zone-redundant storage (ZRS).

Answer D is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Zone-redundant storage (ZRS).

 

Question 7

To add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover, which Azure configuration should be selected?

1. General-purpose v2 storage account
2. Customer-managed keys
3. Blob object replication
4. Geo-redundant storage (GRS)

Correct Answer: D

 

Correct Answer

Answer D is correct because Geo-redundant storage (GRS) is redundancy that keeps local copies in the primary region and asynchronously replicates data to a paired secondary region. It directly supports the requirement to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover.

Incorrect Answers

Answer A is incorrect because General-purpose v2 storage account is used to host general Azure Storage workloads with broad feature support; it does not provide the capability described in the scenario.

Answer B is incorrect because Customer-managed keys is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it does not provide the capability described in the scenario.

Answer C is incorrect because Blob object replication is used to copy blob changes across storage accounts for distribution or resilience scenarios; it does not provide the capability described in the scenario.

 

Question 8

For Geo-redundant storage (GRS), which administrative outcome is expected?

1. Protect data from a single availability-zone failure within the primary region
2. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
3. Add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover
4. Host general Azure Storage workloads with broad feature support

Correct Answer: C

 

Correct Answer

Answer C is correct because Geo-redundant storage (GRS) is redundancy that keeps local copies in the primary region and asynchronously replicates data to a paired secondary region. Its intended administrative use is to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Zone-redundant storage (ZRS), which is used to protect data from a single availability-zone failure within the primary region; it is not the primary purpose of Geo-redundant storage (GRS).

Answer B is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Geo-redundant storage (GRS).

Answer D is incorrect because that outcome belongs to General-purpose v2 storage account, which is used to host general Azure Storage workloads with broad feature support; it is not the primary purpose of Geo-redundant storage (GRS).

 

Question 9

To allow read access to the secondary-region copy while asynchronous geo-replication remains enabled, which Azure configuration should be selected?

1. Geo-zone-redundant storage (GZRS)
2. Infrastructure encryption
3. Read-access geo-redundant storage (RA-GRS)
4. Object replication prerequisites

Correct Answer: C

 

Correct Answer

Answer C is correct because Read-access geo-redundant storage (RA-GRS) is GRS with a readable secondary endpoint. It directly supports the requirement to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled.

Incorrect Answers

Answer A is incorrect because Geo-zone-redundant storage (GZRS) is used to combine availability-zone resilience in the primary region with regional disaster durability; it does not provide the capability described in the scenario.

Answer B is incorrect because Infrastructure encryption is used to provide double encryption at rest for workloads with stricter encryption requirements; it does not provide the capability described in the scenario.

Answer D is incorrect because Object replication prerequisites is used to prepare storage accounts so Azure can track and replicate object changes correctly; it does not provide the capability described in the scenario.

 

Question 10

For Read-access geo-redundant storage (RA-GRS), which administrative outcome is expected?

1. Protect data from a single availability-zone failure within the primary region
2. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
3. Allow read access to the secondary-region copy while asynchronous geo-replication remains enabled
4. Prepare storage accounts so Azure can track and replicate object changes correctly

Correct Answer: C

 

Correct Answer

Answer C is correct because Read-access geo-redundant storage (RA-GRS) is GRS with a readable secondary endpoint. Its intended administrative use is to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Zone-redundant storage (ZRS), which is used to protect data from a single availability-zone failure within the primary region; it is not the primary purpose of Read-access geo-redundant storage (RA-GRS).

Answer B is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Read-access geo-redundant storage (RA-GRS).

Answer D is incorrect because that outcome belongs to Object replication prerequisites, which is used to prepare storage accounts so Azure can track and replicate object changes correctly; it is not the primary purpose of Read-access geo-redundant storage (RA-GRS).

 

Question 11

To combine availability-zone resilience in the primary region with regional disaster durability, which Azure configuration should be selected?

1. Object replication prerequisites
2. Blob object replication
3. General-purpose v2 storage account
4. Geo-zone-redundant storage (GZRS)

Correct Answer: D

 

Correct Answer

Answer D is correct because Geo-zone-redundant storage (GZRS) is redundancy that uses zone redundancy in the primary region and asynchronously replicates to a secondary region. It directly supports the requirement to combine availability-zone resilience in the primary region with regional disaster durability.

Incorrect Answers

Answer A is incorrect because Object replication prerequisites is used to prepare storage accounts so Azure can track and replicate object changes correctly; it does not provide the capability described in the scenario.

Answer B is incorrect because Blob object replication is used to copy blob changes across storage accounts for distribution or resilience scenarios; it does not provide the capability described in the scenario.

Answer C is incorrect because General-purpose v2 storage account is used to host general Azure Storage workloads with broad feature support; it does not provide the capability described in the scenario.

 

Question 12

For Geo-zone-redundant storage (GZRS), which administrative outcome is expected?

1. Combine availability-zone resilience in the primary region with regional disaster durability
2. Prepare storage accounts so Azure can track and replicate object changes correctly
3. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
4. Add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover

Correct Answer: A

 

Correct Answer

Answer A is correct because Geo-zone-redundant storage (GZRS) is redundancy that uses zone redundancy in the primary region and asynchronously replicates to a secondary region. Its intended administrative use is to combine availability-zone resilience in the primary region with regional disaster durability.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Object replication prerequisites, which is used to prepare storage accounts so Azure can track and replicate object changes correctly; it is not the primary purpose of Geo-zone-redundant storage (GZRS).

Answer C is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Geo-zone-redundant storage (GZRS).

Answer D is incorrect because that outcome belongs to Geo-redundant storage (GRS), which is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it is not the primary purpose of Geo-zone-redundant storage (GZRS).

 

Question 13

To provide both zone resilience and a readable geo-replicated secondary copy, which Azure configuration should be selected?

1. Infrastructure encryption
2. Read-access geo-redundant storage (RA-GRS)
3. Zone-redundant storage (ZRS)
4. Read-access geo-zone-redundant storage (RA-GZRS)

Correct Answer: D

 

Correct Answer

Answer D is correct because Read-access geo-zone-redundant storage (RA-GZRS) is GZRS with read access to the secondary region. It directly supports the requirement to provide both zone resilience and a readable geo-replicated secondary copy.

Incorrect Answers

Answer A is incorrect because Infrastructure encryption is used to provide double encryption at rest for workloads with stricter encryption requirements; it does not provide the capability described in the scenario.

Answer B is incorrect because Read-access geo-redundant storage (RA-GRS) is used to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled; it does not provide the capability described in the scenario.

Answer C is incorrect because Zone-redundant storage (ZRS) is used to protect data from a single availability-zone failure within the primary region; it does not provide the capability described in the scenario.

 

Question 14

For Read-access geo-zone-redundant storage (RA-GZRS), which administrative outcome is expected?

1. Combine availability-zone resilience in the primary region with regional disaster durability
2. Copy blob changes across storage accounts for distribution or resilience scenarios
3. Provide both zone resilience and a readable geo-replicated secondary copy
4. Host general Azure Storage workloads with broad feature support

Correct Answer: C

 

Correct Answer

Answer C is correct because Read-access geo-zone-redundant storage (RA-GZRS) is GZRS with read access to the secondary region. Its intended administrative use is to provide both zone resilience and a readable geo-replicated secondary copy.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Geo-zone-redundant storage (GZRS), which is used to combine availability-zone resilience in the primary region with regional disaster durability; it is not the primary purpose of Read-access geo-zone-redundant storage (RA-GZRS).

Answer B is incorrect because that outcome belongs to Blob object replication, which is used to copy blob changes across storage accounts for distribution or resilience scenarios; it is not the primary purpose of Read-access geo-zone-redundant storage (RA-GZRS).

Answer D is incorrect because that outcome belongs to General-purpose v2 storage account, which is used to host general Azure Storage workloads with broad feature support; it is not the primary purpose of Read-access geo-zone-redundant storage (RA-GZRS).

 

Question 15

To encrypt stored data without requiring the customer to manage key lifecycle, which Azure configuration should be selected?

1. Geo-zone-redundant storage (GZRS)
2. Microsoft-managed encryption keys
3. Infrastructure encryption
4. Geo-redundant storage (GRS)

Correct Answer: B

 

Correct Answer

Answer B is correct because Microsoft-managed encryption keys is the default Azure Storage encryption key management model in which Microsoft manages the keys used for encryption at rest. It directly supports the requirement to encrypt stored data without requiring the customer to manage key lifecycle.

Incorrect Answers

Answer A is incorrect because Geo-zone-redundant storage (GZRS) is used to combine availability-zone resilience in the primary region with regional disaster durability; it does not provide the capability described in the scenario.

Answer C is incorrect because Infrastructure encryption is used to provide double encryption at rest for workloads with stricter encryption requirements; it does not provide the capability described in the scenario.

Answer D is incorrect because Geo-redundant storage (GRS) is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it does not provide the capability described in the scenario.

 

Question 16

For Microsoft-managed encryption keys, which administrative outcome is expected?

1. Provide double encryption at rest for workloads with stricter encryption requirements
2. Add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover
3. Encrypt stored data without requiring the customer to manage key lifecycle
4. Allow read access to the secondary-region copy while asynchronous geo-replication remains enabled

Correct Answer: C

 

Correct Answer

Answer C is correct because Microsoft-managed encryption keys is the default Azure Storage encryption key management model in which Microsoft manages the keys used for encryption at rest. Its intended administrative use is to encrypt stored data without requiring the customer to manage key lifecycle.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Infrastructure encryption, which is used to provide double encryption at rest for workloads with stricter encryption requirements; it is not the primary purpose of Microsoft-managed encryption keys.

Answer B is incorrect because that outcome belongs to Geo-redundant storage (GRS), which is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it is not the primary purpose of Microsoft-managed encryption keys.

Answer D is incorrect because that outcome belongs to Read-access geo-redundant storage (RA-GRS), which is used to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled; it is not the primary purpose of Microsoft-managed encryption keys.

 

Question 17

To give an organization control over key rotation, revocation, and key-governance policy for storage encryption, which Azure configuration should be selected?

1. Customer-managed keys
2. Read-access geo-zone-redundant storage (RA-GZRS)
3. Geo-redundant storage (GRS)
4. Microsoft-managed encryption keys

Correct Answer: A

 

Correct Answer

Answer A is correct because Customer-managed keys is Azure Storage encryption keys controlled by the customer, typically through Azure Key Vault or Managed HSM integration. It directly supports the requirement to give an organization control over key rotation, revocation, and key-governance policy for storage encryption.

Incorrect Answers

Answer B is incorrect because Read-access geo-zone-redundant storage (RA-GZRS) is used to provide both zone resilience and a readable geo-replicated secondary copy; it does not provide the capability described in the scenario.

Answer C is incorrect because Geo-redundant storage (GRS) is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it does not provide the capability described in the scenario.

Answer D is incorrect because Microsoft-managed encryption keys is used to encrypt stored data without requiring the customer to manage key lifecycle; it does not provide the capability described in the scenario.

 

Question 18

For Customer-managed keys, which administrative outcome is expected?

1. Add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover
2. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
3. Provide double encryption at rest for workloads with stricter encryption requirements
4. Combine availability-zone resilience in the primary region with regional disaster durability

Correct Answer: B

 

Correct Answer

Answer B is correct because Customer-managed keys is Azure Storage encryption keys controlled by the customer, typically through Azure Key Vault or Managed HSM integration. Its intended administrative use is to give an organization control over key rotation, revocation, and key-governance policy for storage encryption.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Geo-redundant storage (GRS), which is used to add regional disaster durability while keeping the secondary endpoint unavailable for normal reads until failover; it is not the primary purpose of Customer-managed keys.

Answer C is incorrect because that outcome belongs to Infrastructure encryption, which is used to provide double encryption at rest for workloads with stricter encryption requirements; it is not the primary purpose of Customer-managed keys.

Answer D is incorrect because that outcome belongs to Geo-zone-redundant storage (GZRS), which is used to combine availability-zone resilience in the primary region with regional disaster durability; it is not the primary purpose of Customer-managed keys.

 

Question 19

To provide double encryption at rest for workloads with stricter encryption requirements, which Azure configuration should be selected?

1. Zone-redundant storage (ZRS)
2. Infrastructure encryption
3. Read-access geo-redundant storage (RA-GRS)
4. Microsoft-managed encryption keys

Correct Answer: B

 

Correct Answer

Answer B is correct because Infrastructure encryption is an optional additional encryption layer that encrypts storage data again at the infrastructure level. It directly supports the requirement to provide double encryption at rest for workloads with stricter encryption requirements.

Incorrect Answers

Answer A is incorrect because Zone-redundant storage (ZRS) is used to protect data from a single availability-zone failure within the primary region; it does not provide the capability described in the scenario.

Answer C is incorrect because Read-access geo-redundant storage (RA-GRS) is used to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled; it does not provide the capability described in the scenario.

Answer D is incorrect because Microsoft-managed encryption keys is used to encrypt stored data without requiring the customer to manage key lifecycle; it does not provide the capability described in the scenario.

 

Question 20

For Infrastructure encryption, which administrative outcome is expected?

1. Provide double encryption at rest for workloads with stricter encryption requirements
2. Prepare storage accounts so Azure can track and replicate object changes correctly
3. Protect data from a single availability-zone failure within the primary region
4. Provide low-cost local durability without protection from a datacenter-level regional location failure

Correct Answer: A

 

Correct Answer

Answer A is correct because Infrastructure encryption is an optional additional encryption layer that encrypts storage data again at the infrastructure level. Its intended administrative use is to provide double encryption at rest for workloads with stricter encryption requirements.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Object replication prerequisites, which is used to prepare storage accounts so Azure can track and replicate object changes correctly; it is not the primary purpose of Infrastructure encryption.

Answer C is incorrect because that outcome belongs to Zone-redundant storage (ZRS), which is used to protect data from a single availability-zone failure within the primary region; it is not the primary purpose of Infrastructure encryption.

Answer D is incorrect because that outcome belongs to Locally redundant storage (LRS), which is used to provide low-cost local durability without protection from a datacenter-level regional location failure; it is not the primary purpose of Infrastructure encryption.

 

Question 21

To copy blob changes across storage accounts for distribution or resilience scenarios, which Azure configuration should be selected?

1. Geo-zone-redundant storage (GZRS)
2. General-purpose v2 storage account
3. Object replication prerequisites
4. Blob object replication

Correct Answer: D

 

Correct Answer

Answer D is correct because Blob object replication is asynchronous replication of block blobs between containers in supported storage accounts. It directly supports the requirement to copy blob changes across storage accounts for distribution or resilience scenarios.

Incorrect Answers

Answer A is incorrect because Geo-zone-redundant storage (GZRS) is used to combine availability-zone resilience in the primary region with regional disaster durability; it does not provide the capability described in the scenario.

Answer B is incorrect because General-purpose v2 storage account is used to host general Azure Storage workloads with broad feature support; it does not provide the capability described in the scenario.

Answer C is incorrect because Object replication prerequisites is used to prepare storage accounts so Azure can track and replicate object changes correctly; it does not provide the capability described in the scenario.

 

Question 22

For Blob object replication, which administrative outcome is expected?

1. Encrypt stored data without requiring the customer to manage key lifecycle
2. Provide low-cost local durability without protection from a datacenter-level regional location failure
3. Prepare storage accounts so Azure can track and replicate object changes correctly
4. Copy blob changes across storage accounts for distribution or resilience scenarios

Correct Answer: D

 

Correct Answer

Answer D is correct because Blob object replication is asynchronous replication of block blobs between containers in supported storage accounts. Its intended administrative use is to copy blob changes across storage accounts for distribution or resilience scenarios.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Microsoft-managed encryption keys, which is used to encrypt stored data without requiring the customer to manage key lifecycle; it is not the primary purpose of Blob object replication.

Answer B is incorrect because that outcome belongs to Locally redundant storage (LRS), which is used to provide low-cost local durability without protection from a datacenter-level regional location failure; it is not the primary purpose of Blob object replication.

Answer C is incorrect because that outcome belongs to Object replication prerequisites, which is used to prepare storage accounts so Azure can track and replicate object changes correctly; it is not the primary purpose of Blob object replication.

 

Question 23

To prepare storage accounts so Azure can track and replicate object changes correctly, which Azure configuration should be selected?

1. Object replication prerequisites
2. Blob object replication
3. Read-access geo-redundant storage (RA-GRS)
4. Geo-zone-redundant storage (GZRS)

Correct Answer: A

 

Correct Answer

Answer A is correct because Object replication prerequisites is the source and destination configuration requirements for blob object replication, including blob versioning on both accounts and change feed on the source. It directly supports the requirement to prepare storage accounts so Azure can track and replicate object changes correctly.

Incorrect Answers

Answer B is incorrect because Blob object replication is used to copy blob changes across storage accounts for distribution or resilience scenarios; it does not provide the capability described in the scenario.

Answer C is incorrect because Read-access geo-redundant storage (RA-GRS) is used to allow read access to the secondary-region copy while asynchronous geo-replication remains enabled; it does not provide the capability described in the scenario.

Answer D is incorrect because Geo-zone-redundant storage (GZRS) is used to combine availability-zone resilience in the primary region with regional disaster durability; it does not provide the capability described in the scenario.

 

Question 24

For Object replication prerequisites, which administrative outcome is expected?

1. Give an organization control over key rotation, revocation, and key-governance policy for storage encryption
2. Prepare storage accounts so Azure can track and replicate object changes correctly
3. Protect data from a single availability-zone failure within the primary region
4. Provide low-cost local durability without protection from a datacenter-level regional location failure

Correct Answer: B

 

Correct Answer

Answer B is correct because Object replication prerequisites is the source and destination configuration requirements for blob object replication, including blob versioning on both accounts and change feed on the source. Its intended administrative use is to prepare storage accounts so Azure can track and replicate object changes correctly.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Customer-managed keys, which is used to give an organization control over key rotation, revocation, and key-governance policy for storage encryption; it is not the primary purpose of Object replication prerequisites.

Answer C is incorrect because that outcome belongs to Zone-redundant storage (ZRS), which is used to protect data from a single availability-zone failure within the primary region; it is not the primary purpose of Object replication prerequisites.

Answer D is incorrect because that outcome belongs to Locally redundant storage (LRS), which is used to provide low-cost local durability without protection from a datacenter-level regional location failure; it is not the primary purpose of Object replication prerequisites.