Azure Exam Preparation: Archiving Solution for App1 Logs

Archiving Solution for App1 Logs

Question

You have an application named App1. App1 generates log files that must be archived for five years. The log files must be readable by App1 but must not be modified.

Which storage solution should you recommend for archiving?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

Immutable storage for Azure Blob storage enables users to store business-critical data objects in a WORM (Write Once, Read Many) state.

Immutable storage supports:

Time-based retention policy support: Users can set policies to store data for a specified interval. When a time-based retention policy is set, blobs can be created and read, but not modified or deleted. After the retention period has expired, blobs can be deleted but not overwritten.

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage

The best storage solution for archiving App1 log files for five years, that must be readable by App1 but not modified, is to use Azure Blob storage with a time-based retention policy. Therefore, the correct answer is B.

Explanation:

Option A: Ingest the log files into an Azure Log Analytics workspace Azure Log Analytics is a service that collects and analyzes log data from various sources. While Log Analytics is an excellent choice for real-time log analysis and visualization, it is not suitable for archiving log files for a long time, such as five years. Therefore, Option A is not the best solution for this scenario.

Option B: Use an Azure Blob storage account and a time-based retention policy Azure Blob storage is a scalable and cost-effective solution for storing unstructured data such as log files. By creating a Blob storage account, you can upload your log files as blobs and configure a time-based retention policy to ensure that the files are retained for the required five years. With Blob storage, you can also use the Azure role-based access control (RBAC) to grant App1 the necessary permissions to read the log files while preventing any modification. Therefore, Option B is the best solution for this scenario.

Option C: Use an Azure Blob storage account configured to use the Archive access tier Azure Blob storage offers three access tiers - hot, cool, and archive. The archive tier is designed for long-term retention of data that is accessed infrequently and stored for at least 180 days. While the archive tier is cost-effective for storing large amounts of data, accessing the data is slower than the hot and cool tiers. Since App1 needs to read the log files, the archive access tier may not be the best solution for this scenario.

Option D: Use an Azure file share that has access control enabled Azure Files is a fully managed file share service in the cloud that enables you to set up highly available network file shares that can be accessed by using the industry-standard Server Message Block (SMB) protocol. While Azure Files can be used to store and share files, it is not the best solution for archiving log files for a long time, such as five years. Therefore, Option D is not the best solution for this scenario.

In conclusion, Option B is the best solution for archiving App1 log files for five years, as it offers scalable and cost-effective storage, time-based retention policy, and access control to prevent modifications.