Where LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS keep your copies, what each survives, and which account types support them.
From Ultra Transcenders AZ-104 by Tony Rough
Azure Storage always keeps multiple copies of your data; the redundancy option decides where those copies live and therefore which failures the data survives. The trade-off is cost against the size of the failure you’re protecting against.
| Option | Copies and replication | Survives |
|---|---|---|
| LRS | 3 synchronous copies in one datacentre in the primary region; cheapest | Disk or rack failure, not a datacentre outage |
| ZRS | Synchronous across 3 availability zones in the primary region | Loss of one zone or datacentre |
| GRS / RA-GRS | LRS in the primary region + asynchronous copy to the fixed paired region (for example North Europe ↔︎ West Europe) | Regional outage |
| GZRS / RA-GZRS | ZRS in the primary region + asynchronous copy to the paired region | Zone and regional outage |
With GRS and GZRS the secondary region keeps three more synchronous (LRS) copies, six copies in all, and that data can be read only after a failover; RA-GRS and RA-GZRS add read access to the secondary region at any time. (See Figure 4.1.)
This note is one section of Ultra Transcenders AZ-104: Microsoft Azure Administrator, an independent study guide that explains every topic the exam covers by technology, with comparison tables, diagrams and the common traps, plus a glossary linked to Microsoft Learn.
About the book · Free AZ-104 glossary · All AZ-104 study notes
The three SAS types, what each can grant, how they're signed, and how to revoke one when a token leaks.
How the storage account firewall decides who gets in: IP rules, VNet rules with service endpoints, private endpoints and the trusted-services exception.
The order Azure applies subnet and NIC network security groups for inbound and outbound traffic, how priority works, and a worked example.
What a private endpoint puts in your subnet, how private DNS zones make names resolve to it, and when to choose it over a service endpoint.
Which App Service tiers allow manual scale-out, autoscale, slots and how many instances, and the difference between scaling up and scaling out.
Fault and update domains, zones, the SLA each gives, and what you can and can't change after a VM is created.
What delete and read-only locks block, how they inherit, and the surprising things a ReadOnly lock stops (like listing storage keys).