Hotspot Question You have an Azure subscription linked to a hybrid Microsoft Entra tenant. The tenant contains the users shown in the following table. You create the Azure Files shares shown in the…

Question

Exhibits

Answer Area

• User1 can access the content in share1.No
• User2 can access the content in share2.Yes
• User2 can access the content in share3.No

Explanation

Here's the breakdown for each statement:

• User1 can access the content in share1. => No

  • User1 is a cloud-only user, as indicated by "On-premises sync enabled: No".
  • The storage account contoso2024 (which hosts share1) is configured with an Active Directory authentication source. The exhibit shows "Azure Active Directory" selected for Step 1, with a critical note stating that "User accounts solely based in Azure AD are currently not supported" for identity-based access. This means cloud-only users like User1 cannot authenticate against this configuration.

• User2 can access the content in share2. => Yes

  • User2 is a hybrid user, synced from an on-premises Active Directory, as indicated by "On-premises sync enabled: Yes".
  • The storage account contoso2024 (hosting share2) has an Active Directory authentication source configured. As a hybrid user, User2 can successfully authenticate against this AD source.
  • Share-level permissions for contoso2024 are configured to "Enable permissions for all authenticated users and groups" with the "Storage File Data SMB Share Contributor" role, which User2 receives upon successful authentication.

• User2 can access the content in share3. => No

  • share3 is located on the storage account contoso2025.
  • The problem description and exhibit only detail the identity-based access configuration for contoso2024. There is no information provided, nor is it implied, that contoso2025 has an Active Directory authentication source configured. Without identity-based access enabled for contoso2025, User2 cannot use their AD identity to access share3.

No community discussion yet for this question.