AZ-104 Question #540: Real Exam Question with Answer & Explanation

Submitted by takeshi77· Mar 4, 2026Implement and manage storage accounts - specifically storage networking, access control, and blob tiering under the AZ-104 'Implement and Manage Storage' domain (typically 15-20% of exam weight)

Question

Hotspot Question You have an Azure Load Balancer named LB1. You assign a user named User1 the roles shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Answer:

Explanation

The question appears to reference a storage account configuration exhibit (not an Azure Load Balancer as mentioned in the stem, suggesting a question bank mismatch). Based on the answers provided: A server with public IP 131.107.103.10 CAN access storageaccount1 (Yes) because the storage firewall likely includes that IP in its allowed list or allows all networks. Individual blobs CAN be set to the archive tier (Yes) because Azure Blob Storage supports lifecycle management and manual tier assignment at the individual blob level for general-purpose v2 or Blob storage accounts. Global Administrators CANNOT access a file share using Azure AD credentials (No) because Azure Files SMB access requires explicit RBAC role assignments (like Storage File Data SMB Share Reader/Contributor) or traditional AD DS authentication - Global Admin in Azure AD does not automatically grant data-plane access to Azure file shares, as Azure AD is used for identity but file share access requires specific storage RBAC or Kerberos-based AD DS integration.

Topics

#Azure Storage Firewall#Blob Storage Tiers#Azure Files Authentication#Azure RBAC

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice Browse All AZ-104 Questions