AZ-104 Question #714: Real Exam Question with Answer & Explanation

Submitted by yuriko_h· Mar 4, 2026Implement and manage storage access - specifically managing authorization and role-based access control (RBAC) for Azure Storage services, distinguishing between Blob, File, Queue, and Table service-specific roles (AZ-104: Implement and Manage Storage / AZ-305: Design Identity, Governance, and Monitoring Solutions)

Question

Hotspot Question You have an Azure Storage account named contoso2024 that contains the resources shown in the following table. You have users that have permissions for contoso2024 as shown in the following table. The contoso2024 account is configured as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Explanation

User1 has only Blob storage permissions (e.g., Storage Blob Data Reader) which does not grant access to Azure File shares - Blob and File services use separate RBAC roles and access mechanisms, so User1 cannot read File1 in the file share. User2 has appropriate permissions for the file share (e.g., Storage File Data SMB Share Reader or Contributor) allowing them to read File2. User3 has a higher-level role such as Storage Account Contributor or Owner, which grants broad access across all storage services including both Blob and File storage, enabling them to read both File1 and File2.

Topics

#Azure Storage RBAC#Azure Files vs Blob Storage Permissions#Storage Account Access Control#Identity and Access Management

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice Browse All AZ-104 Questions