Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

Use an Azure Storage account that combines a time-based immutable blob policy with the read-access geo-zone-redundant storage (RA-GZRS) replication tier.

• The immutable blob policy enforces write-once, read-many (WORM) protection, blocking all modifications and deletions for the specified seven-year retention period, which satisfies the compliance requirement.
• RA-GZRS stores three synchronous copies across separate availability zones in the primary region (ZRS) and asynchronously replicates to a secondary region. Because the secondary region is available for immediate read access, applications can continue reading data even if the primary region is unavailable, with a typical cross-region RPO of under 15 minutes.
• RA-GZRS provides at least eleven nines (99.999999999 %) annual durability while costing less than building and managing multiple independent storage accounts.

Why the other options do not meet requirements:

• ZRS plus immutability keeps data in a single region, so it cannot withstand a regional outage.
• GRS plus immutability replicates to a secondary region but does not allow reads there until Microsoft triggers a failover, violating the read-access requirement.
• Manually copying between two LRS accounts neither guarantees the stipulated RPO nor delivers the platform-managed durability and availability provided by RA-GZRS.