100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 280
A partner downloads a PDF blob through a read-only Azure Blob service SAS. The download works, but its default filename is an internal object name. For this signed link only, the administrator wants the response to suggest the filename invoice-oct.pdf without changing stored Blob properties or affecting other links. Which SAS parameter should be included when creating and signing this URL?
- Include rscd with a Content-Disposition attachment filename value in the service SAS signature
- Set spr=https in the SAS to force the browser to use the desired download filename
- Replace the read permission in sp with write permission so the browser renames the download
- Set rsct=application/pdf as the only response override and expect it to specify the download filename
Explanation
Correct Answer
A:A service SAS can include a response-header override: rscd sets the Content-Disposition header returned for requests that use this particular signed URL. Include the desired attachment filename value when building the SAS and its signature, preserving read permission and the Blob’s stored metadata. Other links that do not carry the override retain their usual response headers.
Incorrect Answers
B:The spr parameter restricts which transport protocols may be used with the SAS, such as HTTPS-only access. It protects how a download request reaches the service, not what filename the browser receives in Content-Disposition. The partner already downloads successfully; changing transport policy cannot supply the requested response header or override the filename.
C:The sp field limits which operations the SAS authorizes, including reading or writing the Blob. Granting write permission would widen the partner’s authority and would not instruct a browser to rename a downloaded file. Changing this signed field without producing a valid new signature would also invalidate the URL. Keep read permission and adjust the signed response header instead.
D:The rsct response override controls the Content-Type header, which tells clients the MIME type of returned data, such as application/pdf. MIME type can affect handling, but it does not set the attachment filename. The scenario asks for Content-Disposition on this signed link, so rscd must be included and signed rather than relying on rsct alone.
Question 281
A company stores frequently updated blobs in one Azure region. It needs the primary account to remain available when an individual availability zone in that region fails, but no copy in a second region is required. Which redundancy choice is the best fit?
- Locally redundant storage (LRS)
- Zone-redundant storage (ZRS)
- Geo-redundant storage (GRS)
- Read-access geo-redundant storage (RA-GRS)
Explanation
Correct Answer
B:ZRS synchronously replicates data across availability zones within the primary region. It targets the stated intra-region zonal failure without requiring replication to another Azure region.
Incorrect Answers
A:LRS keeps replicas within a single datacenter, protecting against some hardware faults but not independently surviving the loss of that site or its availability zone.
C:GRS adds asynchronous copies in a paired region, which the business specifically does not need. Its regional protection and cost exceed the stated zonal design target.
D:RA-GRS also replicates to another region and supports reads from the secondary. The additional secondary-read capability is unnecessary when only local zonal resilience is requested.
Question 282
A reporting service must continue reading replicated blobs from a secondary region during a major failure of the primary region, without first initiating an account failover. It can tolerate asynchronous replication lag. Which account redundancy option provides the required secondary endpoint?
- GRS
- LRS
- ZRS
- RA-GRS
Explanation
Correct Answer
D:RA-GRS combines asynchronous geo-replication with a read-only secondary endpoint that an application can target before a primary-region failover. It meets the reporting service’s need to keep reading replicated blobs when the primary region is unavailable. Reads can lag behind recent primary writes, which the scenario expressly tolerates; applications must direct secondary reads appropriately and should not assume current write consistency.
Incorrect Answers
A:Geo-redundant storage copies data asynchronously to a second Azure region, so GRS supplies geographic durability. However, ordinary GRS does not offer the application a readable secondary endpoint before a failover. Because the reporting service must fetch blobs during primary-region failure without initiating failover first, replication alone is insufficient; it needs a read-access geo-redundant configuration.
B:Locally redundant storage keeps copies within a single region, which supports resilience to local hardware failures but does not give the application a secondary geographical endpoint. LRS has no independently readable remote regional copy for the described outage. Choosing LRS would leave the report reader dependent on the unavailable primary region rather than providing the required disaster-read continuity.
C:Zone-redundant storage distributes data across availability zones within the primary region, improving tolerance of a zone failure. The specified outage affects the entire region, and the service explicitly requires reads from a separate secondary region before failover. ZRS by itself does not maintain that geographic copy or expose a secondary regional read endpoint, despite being more resilient than LRS to zonal events.
Question 283
A company is reducing storage costs for an inactive GRS account. Before switching the account from GRS to LRS, auditors ask whether data copies will remain in the paired secondary Azure region. Which consequence should the change plan explicitly acknowledge?
- LRS retains the paired-region copies but disables only the secondary-region endpoint's DNS name
- Changing GRS to LRS removes geographic replication and deletes the secondary-region replica, leaving copies only in the primary region
- LRS replicates synchronously to the paired region so it has a stronger cross-region recovery point than GRS
- Changing redundancy automatically launches a full regional account failover and then restores geo-replication
Explanation
Correct Answer
B:A conversion from GRS to LRS removes geo-redundancy; Azure deletes the replicated secondary-region data. LRS continues to provide local copies within the primary-region datacenter but no separately maintained paired-region recovery copy. Auditors should accept the reduced regional resilience explicitly before the change proceeds.
Incorrect Answers
A:GRS maintains an asynchronously replicated geographic secondary copy. LRS doesn't have geographic replication, so changing to LRS is not just a DNS access toggle. Assuming secondary data remains would overstate disaster-recovery coverage after the cost-reduction change.
C:LRS replicates data locally within a single Azure datacenter, not synchronously across Azure regions. GRS, by contrast, uses asynchronous replication to a secondary paired region. This option reverses both the topology and the resilience implications and would mislead a disaster-recovery review.
D:A redundancy conversion changes the account's replica configuration, not necessarily which region is primary. Azure Storage account failover is a separate controlled operation that promotes the geographic secondary for disaster recovery. Switching GRS to LRS isn't an automatic failover plus restoration of geo-redundancy.
Question 284
A business wants its primary Azure Storage deployment to survive an availability-zone failure, and also maintain asynchronously replicated data in a different region for regional disaster recovery. Which redundancy class is designed for both layers?
- Zone-redundant storage (ZRS) without geo replication
- Read-access GRS as a substitute for primary-region zone redundancy
- Geo-zone-redundant storage (GZRS) where the region and account capabilities support it
- Locally redundant storage (LRS) only
Explanation
Correct Answer
C:GZRS synchronously stores primary-region copies across availability zones and asynchronously replicates to a paired region. It combines zonal durability with regional disaster-recovery replication.
Incorrect Answers
A:ZRS protects against zone-level events within a region but does not by itself maintain a secondary regional copy for a full regional outage.
B:RA-GRS adds secondary read capability to cross-region replication, but does not inherently provide ZRS-style synchronous copies across primary availability zones.
D:LRS keeps replicas in a single datacenter facility within one region and does not supply the two separate resilience layers requested.
Question 285
A compliance team uses archive-tier block blobs and is considering switching its account from LRS to GZRS without changing the archived content. Which compatibility issue must be resolved first?
- Change archived blobs to Cold and assume this can occur without any archive rehydration wait
- Switch to RA-GZRS and assume archived blobs automatically become readable from the secondary endpoint
- Turn on Blob versioning and assume old archived versions become eligible for GZRS unchanged
- Rehydrate archived data to an online tier before selecting a redundancy option that does not support archive
Explanation
Correct Answer
D:Archive access tier is supported with LRS, GRS, and RA-GRS, not ZRS/GZRS/RA-GZRS. The team must address archived blobs and operational cost/latency before the redundancy change.
Incorrect Answers
A:Moving from Archive to an online tier requires rehydration processing and potential charges. An instantaneous metadata change is not a safe assumption for converting account redundancy.
B:RA-GZRS also does not support Archive tier, and secondary readability is not the same as archive rehydration. The account must address the archive incompatibility before conversion.
C:Versioning can preserve historical objects but does not alter which redundancy configurations support Archive. Archived content remains a compatibility problem.
Question 286
An application stores frequently read objects that must remain accessible from a secondary region while the primary is unhealthy, and also needs zone redundancy within the primary region. The chosen region and account type support the necessary options. What redundancy should be selected?
- Locally redundant storage (LRS)
- Zone-redundant storage (ZRS)
- Geo-redundant storage (GRS)
- Read-access geo-zone-redundant storage (RA-GZRS)
Explanation
Correct Answer
D:RA-GZRS combines zone copies in the primary region with cross-region replication and a readable secondary endpoint. It meets both local zone resilience and read-access requirements without waiting for failover.
Incorrect Answers
A:LRS does not spread copies across availability zones or provide a secondary regional endpoint, so it misses both additional requirements.
B:ZRS tolerates eligible zone failures in one region but lacks the requested separately readable cross-region secondary.
C:GRS replicates geographically, but does not promise zone redundancy in the primary nor customer read access to secondary before failover.
Question 287
A manager asks to enable synchronous replication of every blob write across two Azure regions by switching a standard account from LRS to GRS. Which statement should the engineer provide when assessing the proposed recovery-point objective?
- GRS replication to the paired secondary is asynchronous, so some recent writes may not yet be replicated
- GRS makes each application write synchronously durable in both regions before returning
- Enable read-access geo-redundancy (RA-GRS) and assume read access makes replication acknowledgments synchronous across regions
- Switching to ZRS makes the storage account replicate synchronously to a different region
Explanation
Correct Answer
A:GRS copies data synchronously within its primary redundancy domain but replicates to the secondary region asynchronously. A regional failure may therefore have a nonzero recovery-point gap.
Incorrect Answers
B:That behavior is not guaranteed for the geo-replication leg, so this claim could lead to an unsupported zero-data-loss design assumption.
C:Read access to a secondary does not change GRS's asynchronous cross-region write replication. RA-GRS allows reading the asynchronously replicated secondary and cannot guarantee every latest primary write reached the paired region before completion.
D:ZRS places data across zones in one region, not across paired regions. It cannot meet a cross-region replication objective by itself.
Question 288
A reporting service reads from the secondary endpoint of an RA-GRS storage account immediately after a write to the primary. The new item is temporarily absent. Which consistency explanation fits the architecture?
- The secondary is strongly consistent with every primary write acknowledgment
- A geo-secondary endpoint allows direct client writes to repair the delay
- The absence means every SAS automatically expires on the secondary
- Geo-secondary reads are eventually consistent because cross-region replication is asynchronous
Explanation
Correct Answer
D:RA-GRS exposes a read-only secondary endpoint, but replication latency can leave it behind the primary. Applications needing immediate read-after-write should use the primary for that consistency requirement.
Incorrect Answers
A:A primary acknowledgment does not guarantee the remote secondary has replicated the object. Assuming strong consistency can produce incorrect reports.
B:The secondary endpoint is read-only before failover. The client cannot force synchronization by writing the missing item there.
C:Authentication validity and replication timing are independent. The described symptom is an expected eventual-consistency window, not proof of token expiration.
Question 289
A storage account has geo-redundancy and the primary region becomes permanently unavailable. An administrator initiates account failover. What application consideration is central once the secondary becomes primary?
- Plan for asynchronous replication data loss and endpoint/DNS connection transitions around failover
- Assume every acknowledged write survived because geo replication is synchronous
- Delete the storage account before promoting the other region
- Use blob lifecycle policy to swap the primary and secondary regions
Explanation
Correct Answer
A:Account failover changes which region serves as primary and may lose writes not yet copied to the secondary. Clients should handle DNS caching and reconnect to the account service after transition.
Incorrect Answers
B:Geo replication is asynchronous. A region loss can occur before the latest primary writes reach the secondary.
C:Deletion destroys the account rather than executing its supported failover workflow. It would undermine recovery.
D:Lifecycle manages blob aging and tier/deletion actions, not account-level disaster failover or service endpoints.
Question 290
An organization invokes an unplanned customer-managed failover on a GRS storage account after a regional outage. The secondary becomes primary and data access resumes. The team expects the account to remain GRS automatically. What redundancy state must they plan for after this unplanned failover?
- Assume no redundant copies remain because LRS means zero replication
- Delete the storage account and recreate it in the failed region to restore GRS
- Treat the new primary as locally redundant until geo-redundancy is explicitly reconfigured when supported
- Assume synchronous geo-replication resumes instantly to the original primary
Explanation
Correct Answer
C:An unplanned account failover promotes replicated data in the secondary region and typically results in LRS redundancy there. Re-establishing a geographically redundant secondary copy is a separate recovery action.
Incorrect Answers
A:LRS maintains copies within the local data center/region; it is not a single unprotected physical disk. The missing layer is geographic redundancy.
B:Recreating the storage account risks losing the recovered data and does not make the failed region available. The supported operation is to plan re-replication after failover.
D:Unplanned failover does not immediately recreate the former cross-region redundancy. The original region may remain unavailable and asynchronous geo copy requires reconfiguration and time.
Microsoft Azure Administrator (AZ-104) Practice Tests