Blobs are protected with version-level immutability, time-based retention policies (AllowProtectedAppendWrites enabled), and legal hold policies. You want to prevent users from attempting operations that would only fail when a legal hold is active (but all other policies have expired). Which two operations should you block in the application?

When a legal hold is active on a blob, you cannot delete the blob or overwrite its content. Therefore, blocking these operations in the application prevents users from encountering errors that would occur due to the legal hold. Adding data to documents (append operations) is still allowed when AllowProtectedAppendWrites is enabled, even with a legal hold, as it doesn't modify existing data but rather adds new data to the end. Creating new documents is also allowed because it doesn't affect existing blobs under legal hold.