Azure Data Lake Storage Gen2 Blob Soft Delete — Prevent Accidental Deletion
Your organization uses Azure Data Lake Storage Gen2 and needs to prevent accidental deletion of data by enabling soft delete. You also need to ensure that deleted blobs are recoverable for 30 days. What should you configure?
Quick Answer
Blob soft delete is designed to do exactly what this requirement describes: when a blob is deleted, it is not immediately purged, but instead marked as deleted and retained in a recoverable state for a configurable period, here set to 30 days, after which it is permanently removed. This gives an automatic safety net against accidental deletion without requiring anyone to manually intervene at the moment of deletion. It is worth distinguishing this from a few adjacent-sounding options. Blob snapshots create point-in-time copies of a blob's state, but they have to be created deliberately before any change happens and managed manually afterward; they do not automatically capture and recover a deletion the way soft delete does. Azure Backup is built around protecting resources like virtual machines, not individual blobs inside a storage account, so it is not the right tool at this granularity. And container soft delete operates one level up: it protects against an entire container being deleted, not against individual blobs being removed while the container itself stays intact. The general pattern to remember is that Azure Storage offers soft delete at multiple scopes, and the right one depends on exactly what unit of data, a single blob versus an entire container, needs to be recoverable and for how long.
⚠ Common exam trap
A common trap is confusing blob soft delete with container soft delete. Container soft delete protects entire containers, while blob soft delete protects individual blobs. For this question, blob soft delete is required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable blob soft delete and set retention period to 30 days.
Blob soft delete enables recovery of deleted blobs within a specified retention period (30 days in this case). Option A is incorrect because blob snapshots are point-in-time copies that require manual management and do not provide automatic recovery of deleted blobs. Option B is incorrect because Azure Backup is designed for virtual machines and other Azure resources, not for blob-level recovery in Data Lake Storage Gen2. Option C is incorrect because container soft delete deletes entire containers, not individual blobs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable blob snapshots and set them to expire after 30 days.
Why it's wrong here
Incorrect. Enabling blob snapshots does not automatically recover deleted blobs; snapshots must be managed manually and are not a replacement for soft delete.
- ✗
Use Azure Backup to create daily backups of the storage account.
Why it's wrong here
Incorrect. Container soft delete applies to entire containers, not individual blobs, so it does not meet the requirement to recover specific deleted blobs.
- ✗
Enable container soft delete with a retention period of 30 days.
Why it's wrong here
Incorrect. Azure Backup is used for backing up VMs and other resources, not for blob-level recovery in Azure Data Lake Storage Gen2.
- ✓
Enable blob soft delete and set retention period to 30 days.
Why this is correct
Correct. Enabling blob soft delete with a retention period of 30 days allows recovery of deleted blobs within that timeframe, meeting both requirements.
Go deeper
Related to this question
About these practice questions
One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on DP-203
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your organization uses Azure Data Lake Storage Gen2 for a data lake. You need to prevent accidental deletion of data by enabling a soft delete policy. Which configuration is required?
medium- A.Apply an Azure Resource Manager lock.
- B.Configure Azure Backup for the storage account.
- C.Enable blob versioning.
- ✓ D.Enable blob soft delete on the storage account.
Why D: Azure Data Lake Storage Gen2 supports blob soft delete, which protects against accidental deletion by retaining deleted blobs for a specified retention period. Option A is incorrect because Azure Resource Manager locks prevent the deletion or modification of the storage account itself, not the data within it. Option B is incorrect because Azure Backup is designed for backing up VMs, SQL databases, and other workloads, not for managing soft delete of blobs. Option C is incorrect because blob versioning preserves previous versions of blobs, but it does not prevent deletion of the current version; soft delete is specifically for recovery from accidental deletion.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.