AZ-300 Azure Storage Solutions 2 — Questions and Answers
Question 1: Which Azure Storage account type supports both Azure Data Lake Storage Gen2 hierarchical namespace and Blob Storage features?
- General Purpose v1
- General Purpose v2 with HNS enabled (Correct answer)
- BlobStorage account
- FileStorage account
Correct answer: General Purpose v2 with HNS enabled
A General Purpose v2 storage account with Hierarchical Namespace enabled becomes an Azure Data Lake Storage Gen2 account supporting POSIX-like directory operations.
Question 2: What is the purpose of Azure Storage shared access signatures (SAS)?
- Encrypt storage account data
- Grant limited, time-bound access to storage resources without sharing the account key (Correct answer)
- Enable cross-region replication
- Manage storage account firewall rules
Correct answer: Grant limited, time-bound access to storage resources without sharing the account key
SAS tokens provide delegated, fine-grained access to Azure Storage resources with configurable permissions, IP restrictions, and expiry times.
Question 3: Which Azure Storage redundancy option provides the highest durability by replicating data both zone-redundantly in the primary region and geo-redundantly to a secondary region?
- GRS
- RA-GRS
- ZRS
- GZRS (Correct answer)
Correct answer: GZRS
Geo-Zone-Redundant Storage (GZRS) combines ZRS in the primary region with asynchronous geo-replication to a secondary region for maximum durability.
Question 4: What is Azure Blob Storage 'soft delete' designed to protect against?
- Unauthorized access
- Accidental deletion or overwrite of blobs within a configurable retention period (Correct answer)
- Data corruption during upload
- Cross-region replication failures
Correct answer: Accidental deletion or overwrite of blobs within a configurable retention period
Soft delete retains deleted or overwritten blobs for a configurable number of days, allowing recovery from accidental deletions.
Question 5: Which Azure Disk encryption option uses keys stored in Azure Key Vault and managed by the customer to encrypt managed disk data?
- Azure Disk Encryption (ADE)
- Server-Side Encryption with Platform-Managed Keys
- Server-Side Encryption with Customer-Managed Keys (SSE CMK) (Correct answer)
- Transparent Data Encryption
Correct answer: Server-Side Encryption with Customer-Managed Keys (SSE CMK)
SSE with Customer-Managed Keys (CMK) stores the disk encryption key in Azure Key Vault, giving customers full control over the key lifecycle.
Question 6: What is the maximum size of a single Azure Queue Storage message?
- 4 KB
- 64 KB (Correct answer)
- 256 KB
- 1 MB
Correct answer: 64 KB
Azure Queue Storage messages can be up to 64 KB in size, suitable for lightweight task coordination and decoupling.
AZ-300 Azure Storage Solutions 2
Which Azure Storage account type supports both Azure Data Lake Storage Gen2 hierarchical namespace and Blob Storage features?