AZ104-Q: grant file-share access without shared keys
Employees need access to an Azure file share using their organizational identities, not a shared storage key. What should be configured?
- A) A public blob container.
- B) An account SAS with no expiry.
- C) Azure Files identity-based authentication and the appropriate share-level data-access role. ✓
- D) A VM local administrator account only. Answer: C. Azure Files can use identity-based access with share-level authorization rather than shared account keys. Why not the others: The alternatives do not provide governed organizational file-share identity access.
Related
azure-files · rbac · entraid