AZ-104 Practice Question 63: Immutable Blob Time Based Retention
Microsoft Azure Administrator Associate (AZ-104) · Test 7 · question 3 of 10
A regulator requires that financial records stored as blobs cannot be modified or deleted by anyone, including storage account administrators, for seven years after they are written. The retention period must be fixed and must not be shortened later.
What should the administrator configure?
Show answer and explanation
Answer:
Immutable storage for Blob Storage provides a write once, read many (WORM) state. A time-based retention policy keeps blobs unmodifiable and undeletable for a set number of days from when they are written. While the policy is unlocked it is intended for testing and can be changed; locking the policy makes it compliant, and from then on the retention interval can only be extended, never shortened, and the policy cannot be removed while blobs are protected.
Option A does not define an interval. A legal hold protects blobs until it is explicitly cleared, which suits investigations, and it is not tied to a seven-year period.
Option B protects the storage account resource from being deleted. It does not stop blobs inside it from being overwritten or deleted, so the records themselves are not protected.
Option C is a recovery feature. Soft delete keeps deleted blobs recoverable for a limited period (up to 365 days) and it does not prevent modification or deletion, so it cannot satisfy a WORM requirement.
Reference: Overview of immutable storage for blob data