nerdexam
Microsoft

AZ-104 · Question #776

Hotspot Question You have an Azure subscription that contains a storage account named contoso2023. The contoso2023 storage account contains the resources shown in the following table. The…

The correct answer is User1 can access the content in cont1. = Yes; User2 can access the content in cont1. = No; User3 can access the content in share1. = No. User1 can access cont1 because the storage account allows public blob access (anonymous access enabled) and cont1 is configured with public access level set to 'Container' or 'Blob', allowing anonymous reads. User2 cannot access cont1 because User2 lacks the necessary RBAC role…

Submitted by fernanda_arg· Mar 4, 2026Implement and manage storage in Azure - specifically configuring storage account access controls, public access settings, and identity-based authorization for blobs and file shares (AZ-104 Domain: Implement and Manage Storage)

Question

Hotspot Question You have an Azure subscription that contains a storage account named contoso2023. The contoso2023 storage account contains the resources shown in the following table. The contoso2023 storage account is configured as shown in the following exhibit. You have a Microsoft Entra tenant that contains the users shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-104 question #776 exhibit 1
AZ-104 question #776 exhibit 2

Answer Area

  • User1 can access the content in cont1.Yes
  • User2 can access the content in cont1.No
  • User3 can access the content in share1.No

Explanation

User1 can access cont1 because the storage account allows public blob access (anonymous access enabled) and cont1 is configured with public access level set to 'Container' or 'Blob', allowing anonymous reads. User2 cannot access cont1 because User2 lacks the necessary RBAC role assignment or Shared Access Signature - when the storage account requires authentication beyond anonymous access for that user's context, access is denied. User3 cannot access share1 (Azure File Share) because Azure File Shares require either storage account key authentication, Azure AD Kerberos authentication (for domain-joined clients), or an assigned SMB-compatible role; without the proper identity-based access or network configuration, User3 is blocked from the file share.

Topics

#Azure Storage Access Control#Blob Public Access#Azure RBAC#Azure Files Authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice