Data protection: blob and container soft delete, versioning, snapshots, change feed

Resource locks stop someone deleting a storage account, but they do nothing to protect the data inside it from an accidental delete, an overwrite by a buggy application, or ransomware encrypting files. Blob Storage has its own data protection features, found under the account's Data management > Data protection blade. You usually combine several of them, because each protects against a different kind of mistake, and the exam expects you to match the feature to the threat.