az-104 Practice Question 740
Exam: az-104
Domain: Describe Azure architecture and services
Topic: Describe Azure storage services
Difficulty: medium
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a file share named share1.
The subscription is linked to a hybrid Azure Active Directory (Azure AD) tenant that contains a security group named Group1.
You need to grant Group1 the Storage File Data SMB Share Elevated Contributor role for share1.
What should you do first?
Answer Options
A
Enable Active Directory Domain Service (AD DS) authentication for storage1.
B
Grant share-level permissions by using File Explorer.
C
Mount share1 by using File Explorer.
D
Create a private endpoint.
Correct Answer
A: Enable Active Directory Domain Service (AD DS) authentication for storage1.
Explanation
Before you enable Azure AD over SMB for Azure file shares, make sure you have completed the following prerequisites:
1. Select or create an Azure AD tenant.
2. To support authentication with Azure AD credentials, you must enable Azure AD Domain Services for your Azure AD tenant.
Etc.
Note: The Storage File Data SMB Share Elevated Contributor allows read, write, delete and modify NTFS permissions in Azure Storage file shares over SMB.