nerdexam
Microsoft

AZ-500 · Question #420

Hotspot Question You have an Azure subscription that contains a storage account named contoso2023. You need to perform the following tasks: - Verify that identity-based authentication over SMB is…

The correct answer is File Shares should be used to verify that identity-based authentication over SMB is enabled. = Yes; Shared access signature should be used to only grant users access to contoso2023 in the year 2023. = Yes. File Shares settings in Azure Storage accounts contain the configuration for identity-based authentication over SMB, allowing you to verify if Active Directory (AD) or Azure Active Directory Domain Services (Azure AD DS) authentication is enabled for Azure Files. A Shared…

Submitted by hans_de· Mar 6, 2026Implement and manage storage accounts - Configure Azure Storage security including identity-based authentication for Azure Files and time-limited access using SAS tokens (AZ-104 / AZ-305 Storage Security Domain)

Question

Hotspot Question You have an Azure subscription that contains a storage account named contoso2023. You need to perform the following tasks: - Verify that identity-based authentication over SMB is enabled. - Only grant users access to contoso2023 in the year 2023. Which two settings should you use? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point. Answer:

Answer Area

  • File Shares should be used to verify that identity-based authentication over SMB is enabled.Yes
  • Shared access signature should be used to only grant users access to contoso2023 in the year 2023.Yes

Explanation

File Shares settings in Azure Storage accounts contain the configuration for identity-based authentication over SMB, allowing you to verify if Active Directory (AD) or Azure Active Directory Domain Services (Azure AD DS) authentication is enabled for Azure Files. A Shared Access Signature (SAS) token is the correct tool to grant time-limited access to storage resources, as you can set a specific expiry date (e.g., December 31, 2023) to restrict access only within the year 2023 without exposing account keys permanently.

Topics

#Azure Storage#Azure Files SMB Authentication#Shared Access Signature (SAS)#Identity-Based Access Control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice