A business-critical storage account must survive a zone outage in the primary region and also keep a read-only copy in the paired region for reporting if the primary region becomes unavailable. Which redundancy option should you choose?

ZRS because it protects against a single datacenter failure.

ZRS protects within a region across zones, but it does not provide a geo-replicated secondary region for read access.

GZRS because it provides a readable secondary region by default.

GZRS does provide geo-redundancy and zone redundancy, but it does not offer read access to the secondary region.

RA-GRS because it provides zone redundancy and read access to the secondary region.

RA-GRS offers read access to the secondary region, but it does not provide zone redundancy in the primary region.

What does this AZ-104 question test?

Standard ACLs match source addresses.

What is the correct answer to this question?

The correct answer is: RA-GZRS because it provides zone redundancy and read access to the secondary region. — RA-GZRS is the correct choice because it addresses both parts of the requirement. Zone redundancy protects against a single datacenter or zone failure in the primary region, and read access to the secondary region supports reporting or temporary access if the primary region becomes unavailable. It is the most resilient storage option in this set for a workload that needs both zone and geo protection. Why others are wrong: ZRS stays within one region and does not provide a readable secondary region. GZRS adds geo-replication and zone redundancy but still does not permit reads from the secondary region. RA-GRS gives read access in the paired region, but it lacks the zone-redundant protection in the primary region. Only RA-GZRS satisfies both resilience requirements simultaneously.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.