Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization types can you use for…

The correct answer is storage1 can use Azure Active Directory = Yes; storage1 can use Shared Key = Yes; storage1 can use Shared Access Signature (SAS) = Yes; storage2 can use Azure Active Directory = Yes; storage2 can use Shared Key = Yes; storage2 can use Shared Access Signature (SAS) = No. This question tests knowledge of Azure Storage authorization types and which types are supported based on storage account kind and performance tier. Different storage account types (general-purpose v1, v2, BlobStorage, etc.) support different authorization mechanisms.

Submitted by alyssa_d· Mar 6, 2026Secure compute, storage, and databases

Question

Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization types can you use for each storage account? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point. Answer:

Exhibits

Answer Area

storage1 can use Azure Active DirectoryYes
storage1 can use Shared KeyYes
storage1 can use Shared Access Signature (SAS)Yes
storage2 can use Azure Active DirectoryYes
storage2 can use Shared KeyYes
storage2 can use Shared Access Signature (SAS)No

Explanation

This question tests knowledge of Azure Storage authorization types and which types are supported based on storage account kind and performance tier. Different storage account types (general-purpose v1, v2, BlobStorage, etc.) support different authorization mechanisms.

Approach. Azure Storage supports multiple authorization types depending on the account kind and tier. General-purpose v2 (StorageV2) and BlobStorage accounts support: Azure Active Directory (Azure AD/RBAC), Shared Key (Account Key), Shared Access Signatures (SAS), and Anonymous public access. General-purpose v1 accounts also support Shared Key and SAS, but Azure AD RBAC support may be limited depending on configuration. Azure Data Lake Storage Gen2 (hierarchical namespace enabled) supports Azure AD, Shared Key, and SAS. Premium page blob (BlockBlobStorage/FileStorage) accounts support Shared Key and SAS but may have restrictions on AD and anonymous access. The key rule is: Azure AD authorization is supported for Blob, Queue, and Table services on StorageV2 accounts; anonymous access is configurable per container for blob storage; and Shared Key/SAS are universally supported across all account types.

Concept tested. Azure Storage authorization types (Azure AD/RBAC, Shared Key, SAS, Anonymous access) and their compatibility with different storage account kinds (General-purpose v1, General-purpose v2, BlobStorage, BlockBlobStorage, FileStorage) and performance tiers (Standard vs Premium).

Reference. https://learn.microsoft.com/en-us/azure/storage/common/authorize-data-access

Topics

#storage account authorization#Azure AD#Shared Key#Shared Access Signature

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice