1. What is an Azure Storage Account?

An Azure Storage Account is a cloud storage service that stores all your Azure Storage data objects, including Blobs, Files, Queues, and Tables.

Key Points:

• Stores all Azure Storage services in one account.
• Storage account name must be globally unique.
• Name length should be 3 to 24 characters.
• Only lowercase letters and numbers are allowed.

2. Your application is getting a 403 error while accessing blobs from App Service. How do you troubleshoot it?

A 403 Forbidden error usually indicates an authorization or network access issue.

Check the following:

• Verify Storage Account access permissions.
• Check firewall and network access settings.
• Ensure the App Service outbound IP addresses are allowed.
• Verify the correct authentication method (Access Key, SAS Token, or Managed Identity).
• Confirm Blob Storage permissions are configured correctly.

3. What are the different storage services available in an Azure Storage Account?

Azure Storage Account provides four storage services:

• Blob Storage (Containers)
• Azure Files (File Shares)
• Queue Storage
• Table Storage

4. What are the different Blob Storage types?

Azure Blob Storage supports three blob types.

Block Blob

• Stores large files efficiently.
• Suitable for images, videos, backups, and documents.
• Supports parallel upload of blocks.

Page Blob

• Optimized for random read and write operations.
• Mainly used for Azure Virtual Machine disks.

Append Blob

• Optimized for append operations.
• Ideal for logging and audit files.
• Data can only be added to the end of the blob.

5. How many Storage Accounts can be created in one Azure Subscription?

An Azure Subscription can have up to 250 Storage Accounts by default.

6. What is Azure Files?

Azure Files is a fully managed file-sharing service that provides shared storage using standard protocols.

Supported protocols include:

• SMB (Server Message Block)
• NFS (Network File System)

Common Use Cases

• Replacing on-premises file servers.
• Lift-and-Shift application migrations.
• Sharing application configuration files.
• Storing application logs and diagnostics.
• Centralized file sharing across applications.

7. What is Data Replication in Azure Storage?

Azure Storage automatically replicates data to improve durability, availability, and disaster recovery.

Local Redundant Storage (LRS)

• Stores 3 copies of data within a single data center.
• Lowest cost option.
• Protects against hardware failures.

Zone-Redundant Storage (ZRS)

• Replicates data across three Availability Zones in the same region.
• Protects against zone failures.

Geo-Redundant Storage (GRS)

• Stores three copies in the primary region.
• Replicates data asynchronously to a secondary Azure region.
• Provides regional disaster recovery.

Geo-Zone Redundant Storage (GZRS)

• Combines ZRS and GRS.
• Replicates data across three Availability Zones and an additional secondary region.
• Provides maximum availability and disaster recovery.

8. What are the different ways to access an Azure Storage Account?

Azure Storage can be accessed using multiple authentication methods.

Storage Account Access Keys

Azure automatically generates two 512-bit access keys for each Storage Account.

HTTP / HTTPS

Data can be securely accessed over the internet using HTTP or HTTPS.

Azure Role-Based Access Control (Azure RBAC)

Azure RBAC manages access permissions for:

• Blob Storage
• Queue Storage
• Table Storage

based on Azure roles.

Azure Attribute-Based Access Control (ABAC)

ABAC extends Azure RBAC by allowing administrators to apply conditional access rules to Blob Storage resources.

Client Libraries

Azure provides SDKs for multiple programming languages, including:

• .NET
• Java
• Python
• Node.js
• Go

REST API

Azure Storage supports REST APIs for managing and accessing storage resources programmatically.

Azure Storage Explorer

Azure Storage Explorer is a graphical tool used to:

• Upload and download files
• Manage blobs
• Create containers
• Manage queues
• Access tables
• Monitor storage resources

9. What is the purpose of Blob Storage?

Azure Blob Storage is designed for storing large amounts of unstructured data such as:

• Images
• Videos
• Documents
• Backups
• Log files
• Media content

It offers scalable, secure, and highly available cloud storage.

10. What is the difference between Blob Storage and Azure Files?

11. Why does Azure provide two Storage Account Access Keys?

Azure provides two access keys so that one key can be regenerated while applications continue using the other key, ensuring zero downtime during key rotation.

12. What is Azure Storage Explorer?

Azure Storage Explorer is a free Microsoft tool that helps users manage Azure Storage resources through a graphical interface. It allows you to create containers, upload files, manage blobs, queues, tables, and file shares without using the Azure Portal.