Exam AZ-104 topic 3 question 68 discussion

Anybody else just slogging through this dumps set? AZ 104 has got to be one of the most exhausting examinations to understand just because of the wide scope of things it covers as well as the specific questions on very specific products and scenarios. Good luck to everyone taking this exam.

The answer is container and queue

Conditions in Role-Based Access Control (RBAC) are supported for specific storage account services, and as of recent updates in Azure, containers (blob storage) and queues support conditions for role assignments. This feature allows for fine-grained access control based on specific conditions, such as IP addresses, resource tags, or other parameters. Other services, like file shares and tables, do not yet support conditions when assigning RBAC roles.

it´s E

E. I failed this exam a couple of days ago on my first attempt. The tips I will comment here probably will be go through this dump case study. In real exam, it took me 40min to finish case study and it was the first question in this exam. Feeling like get myself smashed from beginning.

E is correct

E. containers and queues only is the correct answer. Please check out @TechwithJaspal's video on Youtube. He explains very well. Video: https://www.youtube.com/watch?v=ef87Qun5wBU&list=PLScJxIJb83bc6vblZkn77dMjF6oTxh53y&index=2 Question #139

This question was in exam 15/01/24

How do you assign conditions to container? I only see Policy to be assigned when I'm at the container.

why ET admins doesn't revisit and provide right answer in Reveal solution column ?

This question was on my exam today on 11/14/2023.

Conditions can be added to Containers and Queues. https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-format#actions

As of my last update in September 2021, Azure Active Directory (Azure AD) conditions in role-based access control (RBAC) assignments are generally used for fine-grained access control. These conditions can be based on attributes like user membership, IP address range, device state, and others. However, when it comes to Azure Storage services, not all of them fully support Azure AD-based authentication. Blob containers and queues do support Azure AD authentication, while file shares rely primarily on the SMB protocol (which doesn't use Azure AD for authentication) and tables have their own authentication mechanisms. Therefore, when considering the Azure storage services that support conditions in RBAC assignments based on Azure AD capabilities: E. containers and queues only is the correct answer.

I can view the dumps until 270 questions, does anyone has PDF file for full 533 questions ?

Correct answer is Blob & Queue https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-overview

containers and queues. "Currently, conditions can be added to built-in or custom role assignments that have blob storage or queue storage data actions. " https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-overview#where-can-conditions-be-added

Currently, Azure attribute-based access control (Azure ABAC) is generally available (GA) for controlling access only to Azure Blob Storage, Azure Data Lake Storage Gen2, and Azure Queues using request and resource attributes in the standard storage account performance tier. It is either not available or in PREVIEW for other storage account performance tiers, resource types, and attributes. For complete feature status information of ABAC for Azure Storage, see Status of condition features in Azure Storage. https://learn.microsoft.com/en-us/azure/storage/blobs/storage-auth-abac-examples?tabs=portal-visual-editor