nerdexam
Microsoft

SC-100 · Question #62

Your company is moving a big data solution to Azure. The company plans to use the following storage workloads: - Azure Storage blob containers - Azure Data Lake Storage Gen2 - Azure Storage file…

The correct answer is B. Azure Storage blob containers D. Azure Data Lake Storage Gen2. Azure Storage blob containers (B) and Azure Data Lake Storage Gen2 (D) both support authentication via Azure Active Directory using OAuth 2.0 tokens and Azure RBAC for fine-grained access control. Azure Data Lake Storage Gen2 is built on top of Azure Blob Storage and inherits…

Design security solutions for applications and data

Question

Your company is moving a big data solution to Azure. The company plans to use the following storage workloads:

  • Azure Storage blob containers
  • Azure Data Lake Storage Gen2
  • Azure Storage file shares
  • Azure Disk Storage

Which two storage workloads support authentication by using Azure Active Directory (Azure AD)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AAzure Disk Storage
  • BAzure Storage blob containers
  • CAzure Storage file shares
  • DAzure Data Lake Storage Gen2

How the community answered

(33 responses)
  • A
    9% (3)
  • B
    73% (24)
  • C
    18% (6)

Explanation

Azure Storage blob containers (B) and Azure Data Lake Storage Gen2 (D) both support authentication via Azure Active Directory using OAuth 2.0 tokens and Azure RBAC for fine-grained access control. Azure Data Lake Storage Gen2 is built on top of Azure Blob Storage and inherits its Azure AD authentication support. Azure Disk Storage (A) uses encryption key management (Azure Disk Encryption / platform-managed keys) and does not support Azure AD identity-based authentication for data access. Azure Storage file shares (C) support Azure AD authentication only through Azure AD Domain Services (AADDS) for SMB-joined clients, which is a more limited scenario and not the same direct Azure AD OAuth/RBAC model that blob and ADLS Gen2 support.

Topics

#Azure Storage Security#Azure AD Authentication#Data Lake Storage#Blob Storage

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice