AZ-204 Develop for Azure storage Practice Question
Exhibit
Refer to the exhibit. The following is a snippet of an Azure Resource Manager (ARM) template for a storage account:
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "[parameters('storageAccountName')]",
"location": "[resourceGroup().location]",
"sku": {
"name": "Standard_GRS"
},
"kind": "StorageV2",
"properties": {
"accessTier": "Hot",
"supportsHttpsTrafficOnly": true
}
}You deploy the ARM template shown in the exhibit. After deployment, you need to change the replication to geo-redundant storage (GRS) with read access (RA-GRS). What should you do?
⚠ Common exam trap
Many exam-takers confuse 'Standard_GRS' (which already provides geo-redundancy) with 'Standard_RAGRS', not realizing that read access to the secondary region requires an explicit SKU change, not just a property toggle.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the 'sku.name' to 'Standard_RAGRS' and redeploy.
The ARM template initially deploys a storage account with 'Standard_GRS' (geo-redundant storage), but to enable read access to the secondary region (RA-GRS), you must change the SKU name to 'Standard_RAGRS'. Redeploying the template with this updated property updates the replication setting to RA-GRS, which provides both geo-redundancy and read access to the secondary endpoint.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Redeploy the same template; Standard_GRS already provides geo-redundancy.
Why it's wrong here
While Standard_GRS (Geo-Redundant Storage) does replicate data to a secondary region, ensuring data durability in case of a regional outage, it does not inherently provide read access to that secondary region's data. Read access to the secondary endpoint is only enabled if the primary region becomes unavailable, or if the storage account SKU explicitly supports it, which Standard_GRS does not for direct, active reads. Therefore, simply redeploying the same template would not achieve the desired read access to the secondary region.
- ✗
Set the 'supportsHttpsTrafficOnly' property to false.
Why it's wrong here
The 'supportsHttpsTrafficOnly' property controls whether the storage account accepts unencrypted HTTP connections in addition to HTTPS. Setting this property to 'false' would permit HTTP traffic, potentially compromising security, but it has no bearing on the data replication strategy or the ability to read data from a geo-replicated secondary region. This setting is purely a security and transport protocol configuration, unrelated to data redundancy or read access from a secondary endpoint.
- ✗
Change the 'accessTier' to 'Cool'.
Why it's wrong here
The 'accessTier' property (e.g., Hot, Cool, Archive) dictates the pricing model and performance characteristics for data access within the storage account, based on anticipated usage patterns. Changing the access tier affects storage costs and retrieval latency for the primary data. However, it has absolutely no impact on the underlying data redundancy strategy, such as geo-replication, or the capability to read data from a secondary, geo-replicated region. This property manages data lifecycle, not replication.
- ✓
Update the 'sku.name' to 'Standard_RAGRS' and redeploy.
Why this is correct
To enable read access to a secondary region for geo-redundant storage, the storage account SKU must be specifically configured for this capability. 'Standard_RAGRS' (Read-Access Geo-Redundant Storage) is the precise SKU designed to provide this functionality. It replicates data to a secondary region and exposes an additional, separate endpoint, allowing applications to read data directly from the secondary location even when the primary region is fully operational, which is essential for high availability and disaster recovery architectures.
Go deeper
Related to this question
About these practice questions
One of 881 original AZ-204 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.