Azure Storage Account Compliance Solution

Implementing Regulatory and Compliance Standards for Azure Data Storage

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains an Azure Storage account.

You plan to implement changes to a data storage solution to meet regulatory and compliance standards.

Every day, Azure needs to identify and delete blobs that were NOT modified during the last 100 days.

Solution: You apply an Azure policy that tags the storage account.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Instead apply an Azure Blob storage lifecycle policy.

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?tabs=azure-portal

The solution proposed in the question - applying an Azure policy to tag the storage account - does not meet the goal of identifying and deleting blobs that were not modified during the last 100 days.

An Azure policy is a set of rules that governs how resources can be configured in an Azure subscription. Azure policies can be used to enforce compliance and security requirements. However, applying an Azure policy to tag a storage account does not provide the functionality to identify and delete blobs that were not modified during the last 100 days.

To meet the goal of identifying and deleting such blobs, you can use Azure Blob Storage lifecycle management. This feature allows you to define policies for automatically transitioning blobs to different storage tiers or deleting them based on criteria such as their age or access tier.

In this case, you can create a lifecycle management policy that deletes blobs that were not modified during the last 100 days. To create this policy, you would specify a rule with a "Delete" action and a "DaysSinceModification" filter with a value of 100. This policy would then automatically identify and delete any blobs that meet the specified criteria.

Therefore, the correct answer to this question is B. No, applying an Azure policy to tag the storage account does not meet the goal of identifying and deleting blobs that were not modified during the last 100 days.