Microsoft Certified: Azure Solutions Architect ExpertDesign data storage solutionsHard
A financial institution needs to store immutable audit logs for regulatory compliance. These logs must be write-once, read-many (WORM) and tamper-proof for seven years. After seven years, they can be deleted. The solution must be highly durable and cost-effective for long-term storage. Which Azure data storage solution should be recommended?
- AAzure Blob Storage with Immutability Policy
- BAzure SQL Database with transparent data encryption
- CAzure Data Lake Storage Gen2 with soft delete
- DAzure Managed Instance for Apache Cassandra
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Blob Storage with Immutability Policy
Azure Blob Storage with an Immutability Policy provides WORM (write-once, read-many) capabilities, ensuring that data cannot be modified or deleted for a specified retention period, meeting the regulatory compliance requirements for tamper-proof audit logs. It is also highly durable and cost-effective for long-term storage, especially when combined with appropriate access tiers.
Why the other options are wrong
- B. Azure SQL Database offers encryption but does not inherently provide WORM compliance for audit logs; data can still be modified or deleted by authorized users.
- C. Azure Data Lake Storage Gen2 with soft delete allows for data recovery but does not enforce WORM immutability, meaning data could still be intentionally deleted or modified by an administrator before the soft-delete period expires.
- D. Azure Managed Instance for Apache Cassandra is a NoSQL database for high-throughput, low-latency applications, not designed for WORM compliance for immutable audit logs.
Azure Blob Storage Immutability Policy
A feature in Azure Blob Storage that enables you to store business-critical data in a WORM (write once, read many) state for a time-based retention interval or an indefinite legal hold.
- Ensures data is tamper-proof
- Supports time-based retention or legal hold
- Critical for regulatory compliance (e.g., FINRA, SEC, HIPAA)
Memory trick: Blob Immutability: WORM for seven years, like a digital vault.