You have an Azure Storage account named storage1 that contains a blob container named container1. You need to prevent new content added to container1…

To prevent new content added to container1 from being modified for one year, you should

configure an immutability policy, specifically a time-based retention policy. This policy

ensures that blobs are stored in a Write-Once-Read-Many (WORM) state, making them

non-modifiable and non-deletable for the specified duration. Among the given options, "an

access policy" is the most appropriate choice as an immutability policy is a type of policy

that governs data access by restricting modifications and deletions. While Azure has

"Stored Access Policies" for SAS, the term "access policy" here is likely used more broadly

to encompass policies affecting data handling and access rights, including immutability.

A. the access tier: Access tiers (Hot, Cool, Archive) manage storage costs and retrieval

times, not data immutability or modification prevention.

C. the Access control (IAM) settings: IAM settings define permissions for users and services

(who can do what), but they don't provide time-locked, WORM-state immutability for the

data itself.

D. the access level: The access level (Private, Blob, Container) for a container controls

public anonymous access, not modification prevention for authorized users or time-based

immutability.

Microsoft Learn. (2023). Store business-critical blob data with immutable storage.

"Immutable storage for Azure Blob Storage enables users to store business-critical data

objects in a WORM (Write Once, Read Many) state. ... You can configure immutability

policies for a container or an account. These policies include time-based retention policies

and legal hold policies."

URL: https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview

(Section: "About immutable storage for blobs", "Time-based retention policies")

Microsoft Learn. (2023). Overview of WORM policies for Azure Blob Storage. "A time-based

retention policy stores blob data in a WORM state for a specified interval."

URL: https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storageoverview#time-based-retention-policies

Microsoft Learn. (2023). Define a stored access policy. (This describes the more common,

specific use of "access policy" in Azure Storage, related to SAS, which is different from

immutability policies but illustrates why the chosen option B might be seen as a broader

category).

URL: https://learn.microsoft.com/en-us/rest/api/storageservices/define-stored-access-policy