AZ104-Q: authorize Azure Files without a shared key
A company needs users to mount an Azure file share over SMB using their organizational identities. It must avoid distributing the storage-account key to every user. What should it configure?
- A) Identity-based access for Azure Files and the appropriate share-level/data permissions for the users or groups. ✓
- B) A public blob container.
- C) A SAS token with no expiry.
- D) Contributor at the management-group scope.
Answer: A. Azure Files supports identity-based authentication/authorization for supported configurations, allowing access to be governed through identities and appropriate permissions rather than shared keys.
Why not the others: Blob public access and unbounded SAS are inappropriate. Broad management-plane Contributor is not SMB authorization.
Related
azure-files · rbac · entraid