Question 580 A document was overwritten, and blob versioning was enabled before the change. What restoration approach should be investigated? Change a VM scale-set capacity rule Assume LRS alone keeps a browsable archive of every overwrite Select and restore the intended retained prior blob version Run an account-level DNS or network operation instead of recovering the retained blob version Explanation Correct Answer C:Versions can preserve earlier data independent of the current object's contents. Incorrect Answers A:Compute scaling doesn't retrieve previous Blob contents. B:Redundant current copies aren't version history. D:Network configuration cannot restore bytes from a previously stored blob version.
Question 581 A production application still uses a storage account key that administrators intend to rotate. What operational preparation reduces interruption? Rotate the only used key without identifying consumers Plan key rotation and application credential changes or migrate to identity-based access Disable logging so failures aren't visible Rename the account after every rotation Explanation Correct Answer B:Clients using the rotated key must update before the old credential is invalidated. Incorrect Answers A:Uncoordinated rotation can break authentication. C:Hiding errors doesn't prevent failed sign-ins. D:Renaming isn't the mechanism for safe key updates.
Question 582 A data engineering team must recover from both accidental deletes and overwrites. Which combination is more directly relevant than redundancy alone? Rely only on access logs and omit data-retention or version-recovery capabilities Only a newer VM hardware SKU Only a new region-pair name Soft delete and versioning configured with appropriate retention Explanation Correct Answer D:These features preserve eligible deleted or older object states. Incorrect Answers A:Audit trails help investigate changes but do not themselves restore deleted or overwritten blob content. B:Compute sizing doesn't recover previous Blob contents. C:Geographic labels don't store historical versions.
Question 583 Windows servers can resolve an Azure Files share name but receive access denied while mounting it. What should the team check? The number of storage lifecycle tags Whether the share name uses lowercase characters only The Azure portal time zone Supported share authentication, permissions and network restrictions Explanation Correct Answer D:DNS resolution alone doesn't grant access to protected file shares. Incorrect Answers A:Metadata count doesn't authenticate SMB clients. B:Naming case doesn't grant a principal rights. C:Local UI clock preferences don't determine file-share RBAC.
Question 584 A compliance team must hold archived records for seven years, even when an operator accidentally attempts early deletion. Which feature combination matters? Only an Azure resource tag naming the seven-year deadline Only an Azure Cost Management budget Only the Archive tier with no retention controls A properly scoped immutable retention policy with durable Blob storage Explanation Correct Answer D:Immutability enforces retention against premature deletion when correctly configured. Incorrect Answers A:Labels aren't a hard retention barrier. B:A spending limit isn't data retention enforcement. C:Low-cost tiering alone doesn't prevent eligible deletion.
Question 585 An administrator wants scheduled recovery points for VM disks with retention and restore management. Which Azure service category should be considered? Azure Files share access tier Use VM compute autoscaling as the only backup and point-in-time recovery strategy Azure Backup configured for supported VM protection Only a one-time manually named disk snapshot forever Explanation Correct Answer C:A backup service orchestrates protected recovery points and retention policies. Incorrect Answers A:Share capacity classes aren't a VM backup scheduler. B:More compute capacity does not create protected storage recovery points or coordinate backups. D:A single snapshot doesn't provide ongoing scheduled policy-based backup.
Question 586 An analyst compares Hot, Cool and Archive for one year of retention with known monthly read volumes. What must the estimate include? Expected capacity, access transactions, retrieval and retention penalties Only whether the portal offers dark mode Only the subscription nickname Only the Hot tier's per-GB list price Explanation Correct Answer A:Different tiers balance storage price against reads and minimum retention costs. Incorrect Answers B:UI appearance isn't a storage pricing input. C:Names don't bill transactions. D:Single-tier capacity price doesn't compare the other access patterns.
Question 587 A team moves a large file share into Azure and wants assurance that every expected byte arrived. Which post-transfer step is appropriate? Assume the existence of the destination container proves completeness Trust file names alone as proof of exact migration integrity Rename the source share after starting transfer Verify file counts, checksums or supported integrity evidence against the source Explanation Correct Answer D:Migration success requires data-level validation beyond seeing an empty error log. Incorrect Answers A:One container can exist with missing objects. B:Checksums, counts or supported comparison methods help verify the migrated content independently of names. C:Renaming doesn't verify copied bytes.
Question 588 A noncritical development storage account has no regional recovery requirement but is configured for expensive geo-redundancy. What should the owner review? Assume GRS is always free because it is managed Right-size storage redundancy to the actual recovery and cost requirements Use a VM scale set to reduce geo replication cost Change only the account display name Explanation Correct Answer B:Higher geographic replicas incur different costs that may be unnecessary for temporary test data. Incorrect Answers A:Additional resilience can affect charges. C:Compute scale is not a storage replica setting. D:Naming doesn't select redundancy.
Question 589 An application delivers customer downloads through temporary signed URLs. What secure design consideration helps prevent URL reuse indefinitely? Grant all customers full subscription Contributor rights Use one permanent account-level key in every browser link Limit SAS validity, permissions and resource scope to the download need Disable HTTPS to speed downloads Explanation Correct Answer C:A restricted token reduces exposure if a link is copied. Incorrect Answers A:Management rights are unrelated and excessive for a file download. B:An unbounded key exposes too much authority. D:Removing encryption increases interception risk.
Question 590 A background worker repeatedly fails on one malformed queue message. What processing strategy helps avoid blocking useful work forever? Delete every message in the queue when one fails Retry the malformed message infinitely with no observability Use bounded retries and a poison-message handling path Change only the storage account redundancy model Explanation Correct Answer C:Bad messages need separate investigation while good tasks continue. Incorrect Answers A:That destroys unrelated valid work. B:Endless retries can consume capacity and hide the defect. D:Replica placement doesn't fix message content.
