AZ-104 · Question #539
Hotspot Question You have an Azure subscription that contains an Azure Storage account named storageaccount1. You export storageaccount1 as an Azure Resource Manager template. The template contains…
The correct answer is A server that has a public IP address of 131.107.103.10 can access storageaccount1 = Yes; Individual blobs in storageaccount1 can be set to use the archive tier = Yes; Global administrations in Azure Active Directory (Azure AD) can access a file share hosted in storageaccount1 by using their Azure AD credentials = No. The template shows a network ACL configuration with a specific IP rule allowing 131.107.103.10, confirming Statement 1 is Yes. The storage account uses a 'Standard' tier with 'StorageV2' kind, which supports the archive access tier for individual blobs, making Statement 2 Yes…
Question
Exhibits
Answer Area
- A server that has a public IP address of 131.107.103.10 can access storageaccount1Yes
- Individual blobs in storageaccount1 can be set to use the archive tierYes
- Global administrations in Azure Active Directory (Azure AD) can access a file share hosted in storageaccount1 by using their Azure AD credentialsNo
Explanation
The template shows a network ACL configuration with a specific IP rule allowing 131.107.103.10, confirming Statement 1 is Yes. The storage account uses a 'Standard' tier with 'StorageV2' kind, which supports the archive access tier for individual blobs, making Statement 2 Yes. Statement 3 is No because Azure Files SMB shares use Azure AD Domain Services (AADDS) or on-premises AD DS for authentication - global administrator Azure AD credentials alone do not grant access to file shares without proper Kerberos-based identity configuration, and the template shows no Azure AD authentication enabled for files.
Topics
Community Discussion
No community discussion yet for this question.