The AZ-500 exam has been retired
It was retired on August 31, 2026. It was replaced by SC-500 (Microsoft Cloud and AI Security Engineer). Go to the SC-500 study guide →
Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
4.2.4. Data Protection: Soft Delete, Versioning, Immutable Storage
💡 First Principle: Data protection features prevent accidental or malicious data loss. They work together to provide recoverability and compliance capabilities.
| Feature | Purpose | Protection Against |
|---|---|---|
| Soft Delete | Recover deleted blobs/containers | Accidental deletion |
| Versioning | Maintain previous versions | Accidental overwrites |
| Immutable Storage | Prevent modification/deletion | Malicious tampering, compliance |
Configuring BYOK (Bring Your Own Key)
- Purpose: Use customer-managed keys instead of Microsoft-managed
- Requirement: Azure Key Vault with key
- Configuration: Storage account → Encryption → Customer-managed keys
Enroll to unlock the 5 practice questions written for this section, so you can test what you just read while it is fresh.
Enroll to unlock the 4 flashcards for this section and review them on a spaced-repetition schedule.
Written byAlvin Varughese
Founder•20 professional certifications