AZ-801 Question #65: Real Exam Question with Answer & Explanation

Question

You have a failover cluster named FC1 that contains two nodes named Server1 and Server2. FC1 is configured to use a file share witness. You plan to configure FC1 to use a cloud witness. You need to configure Azure Storage accounts for the cloud witness. Which storage account type and authorization method should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation

This question tests your knowledge of Azure Storage account requirements for configuring a Windows Server Failover Cluster (WSFC) cloud witness. You must select the correct storage account type and the correct authorization method that Azure and Windows Server support for this feature.

Approach. The correct storage account type is Standard performance, General Purpose v2 (GPv2) - cloud witness requires a standard (not premium) general-purpose storage account; Blob Storage accounts and premium tiers are not supported. The correct authorization method is Access key (Shared Key) - the Failover Cluster service authenticates to Azure Blob Storage using the storage account name and one of its two 512-bit access keys, which you paste into the cloud witness wizard in Failover Cluster Manager or via PowerShell (Set-ClusterQuorum). Azure AD/Entra ID OAuth and SAS tokens are not supported for cloud witness configuration as of Windows Server 2016–2022.

Concept tested. Azure cloud witness prerequisites for Windows Server Failover Clustering - specifically the required Azure Storage account tier (Standard GPv2) and the authentication mechanism (storage account access key / Shared Key authorization) needed to configure a cloud witness quorum resource.

Reference. Microsoft Learn: Deploy a cloud witness for a Failover Cluster - https://learn.microsoft.com/en-us/windows-server/failover-clustering/deploy-cloud-witness

No community discussion yet for this question.