Azure Data Lake Storage Gen2 Blob Soft Delete — Prevent Accidental Deletion
Your organization uses Azure Data Lake Storage Gen2 and needs to prevent accidental deletion of data by enabling soft delete. You also need to ensure that deleted blobs are recoverable for 30 days. What should you configure?
Quick Answer
Blob soft delete is designed to do exactly what this requirement describes: when a blob is deleted, it is not immediately purged, but instead marked as deleted and retained in a recoverable state for a configurable period, here set to 30 days, after which it is permanently removed. This gives an automatic safety net against accidental deletion without requiring anyone to manually intervene at the moment of deletion. It is worth distinguishing this from a few adjacent-sounding options. Blob snapshots create point-in-time copies of a blob's state, but they have to be created deliberately before any change happens and managed manually afterward; they do not automatically capture and recover a deletion the way soft delete does. Azure Backup is built around protecting resources like virtual machines, not individual blobs inside a storage account, so it is not the right tool at this granularity. And container soft delete operates one level up: it protects against an entire container being deleted, not against individual blobs being removed while the container itself stays intact. The general pattern to remember is that Azure Storage offers soft delete at multiple scopes, and the right one depends on exactly what unit of data, a single blob versus an entire container, needs to be recoverable and for how long.
⚠ Common exam trap
A common trap is confusing blob soft delete with container soft delete. Container soft delete protects entire containers, while blob soft delete protects individual blobs. For this question, blob soft delete is required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable blob soft delete and set retention period to 30 days.
Blob soft delete enables recovery of deleted blobs within a specified retention period (30 days in this case). Option A is incorrect because blob snapshots are point-in-time copies that require manual management and do not provide automatic recovery of deleted blobs. Option B is incorrect because Azure Backup is designed for virtual machines and other Azure resources, not for blob-level recovery in Data Lake Storage Gen2. Option C is incorrect because container soft delete deletes entire containers, not individual blobs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable blob snapshots and set them to expire after 30 days.
Why it's wrong here
Snapshots are read-only point-in-time copies created manually or by policy; they do not intercept delete operations, so a deleted blob is not recoverable through them. Snapshots suit versioning and point-in-time restore scenarios, not automatic retention of deleted blobs.
- ✗
Use Azure Backup to create daily backups of the storage account.
Why it's wrong here
Azure Backup for storage accounts protects block blobs via vaulted backups on a schedule, not the soft delete mechanism the scenario requires, and it does not retain deleted blobs for 30 days at the storage layer. It suits compliance-driven backup and long-term retention.
- ✗
Enable container soft delete with a retention period of 30 days.
Why it's wrong here
Container soft delete only restores deleted containers, not individual blobs, so deleted blobs within a surviving container remain unrecoverable. It is tempting because it does provide soft delete for ADLS Gen2, but blob soft delete is the feature that retains deleted blobs for the 30-day period.
- ✓
Enable blob soft delete and set retention period to 30 days.
Why this is correct
Blob soft delete retains deleted blobs for a configurable retention period, satisfying the 30-day recoverability constraint. Setting the retention period to 30 days ensures accidental deletions remain restorable within that window, directly meeting the stated requirement.
Go deeper
Related to this question
About these practice questions
One of 509 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on DP-203
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your organization uses Azure Data Lake Storage Gen2 for a data lake. You need to prevent accidental deletion of data by enabling a soft delete policy. Which configuration is required?
medium- A.Apply an Azure Resource Manager lock.
- B.Configure Azure Backup for the storage account.
- C.Enable blob versioning.
- ✓ D.Enable blob soft delete on the storage account.
Why D: Azure Data Lake Storage Gen2 supports blob soft delete, which protects against accidental deletion by retaining deleted blobs for a specified retention period. Option A is incorrect because Azure Resource Manager locks prevent the deletion or modification of the storage account itself, not the data within it. Option B is incorrect because Azure Backup is designed for backing up VMs, SQL databases, and other workloads, not for managing soft delete of blobs. Option C is incorrect because blob versioning preserves previous versions of blobs, but it does not prevent deletion of the current version; soft delete is specifically for recovery from accidental deletion.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.