Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Azure Blob Storage for Unstructured Media and Logs
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
A company is migrating a web application to Azure and needs to establish its core cloud infrastructure. The application architecture has the following specific requirements:
- Store massive volumes of unstructured data, including video files, application logs, and user images
- Provide direct browser-based access to the media assets over HTTP/HTTPS
- Ensure all stored data is automatically encrypted at rest
Which Azure resource should the company deploy to meet these storage requirements?
Explanations
Network Security Group (NSG)
Network Security Group (NSG)
What a Network Security Group Is
A Network Security Group (NSG) is a core Azure networking security resource used to filter network traffic to and from resources connected to an Azure Virtual Network (VNet). NSGs contain a list of security rules that permit or deny inbound and outbound network traffic based on 5-tuple parameters.
Why It Doesn't Meet the Requirement
An NSG is a networking and traffic-filtering service, not a data storage service. It does not provide file, object, or database storage capabilities, nor can it store media assets, log files, or application documents. It functions entirely at the network layer to secure virtual network communication paths.
Key Characteristics and Limitations
- Packet Filtering: Inspects and filters network traffic using source IP, source port, destination IP, destination port, and protocol (TCP/UDP).
- Subnet and NIC Association: Can be linked directly to individual virtual machine network interfaces (NICs) or entire subnets.
- Stateful Rule Evaluation: Automatically allows return traffic for established connections regardless of inbound or outbound rule definitions.
- No Data Persistence: Contains no storage disks or capabilities for hosting files or media assets.
This Answer Would Be Correct If
The organization needed a networking solution to filter inbound HTTP/HTTPS traffic to a web server subnet and block unauthorized external ports like SSH or RDP.
Azure Blob Storage
Azure Blob Storage
What Azure Blob Storage Is
Azure Blob Storage is Microsoft's object storage solution designed specifically for the cloud. It is optimized for storing massive amounts of unstructured data, which refers to data that does not conform to a rigid structure or relational data model, such as text documents, images, audio, video files, and system logs.
How It Meets the Requirements
- Massive Unstructured Data Storage: Blob Storage easily scales to support petabytes of unstructured binary and text data, making it ideal for streaming media and archiving log files.
- Direct HTTP/HTTPS Access: Assets stored in Blob Storage can be accessed directly by web browsers and client applications worldwide via standard HTTP and HTTPS protocols.
- Built-in Encryption at Rest: Azure automatically secures all data written to Blob Storage using server-side encryption with Microsoft-managed or customer-managed keys.
Key Advantages and Capabilities
- Tiered Storage Options: Offers Hot, Cool, Cold, and Archive access tiers to optimize storage costs based on data access frequency.
- High Availability and Durability: Supports multiple redundancy models, including Locally Redundant Storage (LRS) and Geo-Redundant Storage (GRS).
- Granular Security Controls: Integrates with Microsoft Entra ID, Shared Access Signatures (SAS tokens), and Azure Private Endpoints.
- Data Lake Integration: Serves as the foundation for Azure Data Lake Storage Gen2 to handle enterprise analytics and big data workloads.
Why This Is Optimal
Azure Blob Storage is purpose-built for media files, logs, and unstructured content. Unlike relational databases or key vaults, it delivers virtually unlimited capacity at low cost without requiring compute server provisioning.
Azure Key Vault
Azure Key Vault
What Azure Key Vault Is
Azure Key Vault is a centralized cloud service for securely storing and managing application secrets, encryption keys, and digital certificates. It leverages hardware security modules (HSMs) to safeguard sensitive cryptographic material.
Why It Doesn't Meet the Requirement
Azure Key Vault is designed exclusively for small pieces of sensitive administrative data, such as API tokens, connection strings, private encryption keys, and SSL/TLS certificates. It cannot store unstructured binary files, video streams, or general application assets.
Key Characteristics and Limitations
- Secret and Key Management: Securely stores passwords, tokens, API keys, and asymmetric/symmetric encryption keys.
- Certificate Lifecycle Automation: Manages SSL/TLS certificate enrollment, renewal, and deployment across Azure resources.
- Hardware Security Compliance: Validated up to FIPS 140-2 Level 2 or Level 3 standards for cryptographic security.
- Strict Payload Sizing: Secret values are limited to small text strings (typically under 25 KB), making file and media storage impossible.
This Answer Would Be Correct If
The scenario required a secure repository to safeguard database connection strings, application API keys, and cryptographic certificates with access control policies.
Azure SQL Database
Azure SQL Database
What Azure SQL Database Is
Azure SQL Database is a fully managed Platform as a Service (PaaS) relational database engine. It automates critical database administration tasks, such as provisioning, operating system and engine patching, backups, performance tuning, and health monitoring.
Why It Doesn't Meet the Requirement
Azure SQL Database is structured around relational tables, schemas, rows, and columns. It is not designed to efficiently store and stream massive volumes of unstructured data, such as raw video recordings, audio files, or application log files. Storing high volumes of multi-gigabyte media objects directly in a relational database would result in excessive storage costs and poor read/write performance compared to dedicated object storage.
Key Characteristics and Limitations
- Relational Data Focus: Optimized for structured data with strict schemas, relationships, and ACID transactional integrity.
- Managed Database Operations: Includes built-in high availability, automated point-in-time backups, and automated patching.
- Advanced Data Security: Provides Transparent Data Encryption (TDE), vulnerability assessment, and data masking.
- Storage Capacity Limits: Subject to structured database sizing limits, making it unsuitable for massive petabyte-scale file repositories.
This Answer Would Be Correct If
The organization required a managed transactional database service to host structured relational tables for e-commerce orders, customer profile metadata, or financial transactions requiring SQL queries.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Resource Group
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Resource Manager Templates
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure RBAC and Azure Policy
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
New-AzResourceGroup Cmdlet
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Subscription Isolation
Describe subscriptions
IntermediateAZ-204 Developing Solutions for Microsoft Azure Exam
Azure Blob System Properties vs User-Defined Metadata
Set and retrieve properties and metadata
Last updated Validated