Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 2 question 86 discussion

Actual exam question from Microsoft's AZ-104

Question #: 86
Topic #: 2

HOTSPOT
-

You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage.

You need to use AzCopy to copy data to the blob storage and file storage in storage1.

Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by MailTempo at Sept. 2, 2023, 4:49 p.m.

Comments

Submit Cancel

Vokuhila

Highly Voted 1 year, 1 month ago

First: Azure AD & SAS Second: SAS Source: https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy

upvoted 31 times

Sameer9371

1 year, 1 month ago

you are absolutely right

upvoted 3 times

...

hank00r

9 months ago

The link you provided states: "You can provide authorization credentials by using Microsoft Entra ID, or by using a Shared Access Signature (SAS) token". So it should be Azure AD & SAS for both Questions. Am I getting it wrong?

upvoted 18 times

ggogel

8 months, 2 weeks ago

Yes, this must have been changed. The following doc clearly states that Entra ID can be used to authorize access to file shares when using azcopy. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 4 times

SDiwan

8 months ago

No, if you are targetting copy to the whole "file share" then SAS is the only option. Entra ID can be used , if you are copying a fileor files to a specific folder inside file file share. So, SAS only is correct for 2nd question

upvoted 1 times

tableton

6 months ago

But I think the whole file share is not mentioned in the question: "You need to use AzCopy to copy data to the blob storage and file storage in storage1." So EntraID could be used to azcopy to file share

upvoted 4 times

suddin1

4 months, 2 weeks ago

I agree, this is what microsoft says here, " Note The examples in this article show the use of a SAS token to authorize access. However, for commands that target files and directories, you can now provide authorization credentials by using Microsoft Entra ID and omit the SAS token from those commands. You'll still have to use a SAS token in any command that targets only the file share or the account (For example: 'azcopy make https://mystorageaccount.file.core.windows.net/myfileshare' or 'azcopy copy 'https://mystorageaccount.file.core.windows.net'." https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-files

upvoted 4 times

...

[Removed]

Highly Voted 10 months ago

Currently supported method of authorization Blob storage: Microsoft Entra ID & SAS Blob storage (hierarchical namespace): Microsoft Entra ID & SAS File storage: SAS only

upvoted 9 times

heartfilia42

8 months, 2 weeks ago

Sorry, but with the official doc :https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory I don't see anywhere taht you cannot use Azure AD to access File Storage as well as Blob Storage ?

upvoted 3 times

Thisisacat

2 months, 1 week ago

I think for both the answer is 3rd option

upvoted 1 times

...

155e6a0

Most Recent 4 days, 22 hours ago

The answer is incorrect now because File storage supports Microsoft Entra ID after 6/12/2024. The correct answer is SAS and Microsoft Entra ID for both blob storage and file storage. There is a registration process to follow to use MS Entra ID for File with AzCopy. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 1 times

...

SeMo0o0o0o

1 month ago

CORRECT

upvoted 1 times

...

OpOmOp

2 months, 3 weeks ago

It can be authorized with credentials for FileShare as well.. The examples in this article show the use of a SAS token to authorize access. However, for commands that target files and directories, you can now provide authorization credentials by using Microsoft Entra ID and omit the SAS token from those commands. You'll still have to use a SAS token in any command that targets only the file share or the account (For example: 'azcopy make https://mystorageaccount.file.core.windows.net/myfileshare' or 'azcopy copy 'https://mystorageaccount.file.core.windows.net'.

upvoted 3 times

...

varinder82

4 months, 3 weeks ago

Final Answer: First: Azure AD & SAS Second: SAS

upvoted 2 times

...

3c5adce

4 months, 4 weeks ago

Validated by ChatGPT 4 - Blob Storage: Azure AD and Shared Access Signatures (SAS) File Storage: Shared Access Signatures (SAS) only

upvoted 1 times

3c5adce

4 months, 3 weeks ago

Changing my answer Blob storage: Azure AD and shared access signatures (SAS) File storage: Azure AD only

upvoted 2 times

...

ssky

5 months ago

for commands that target files and directories, you can now provide authorization credentials by using Microsoft Entra ID and omit the SAS token from those commands. You'll still have to use a SAS token in any command that targets only the file share or the account

upvoted 4 times

...

tashakori

7 months, 1 week ago

Correct

upvoted 1 times

...

Ziolupo

7 months, 2 weeks ago

Entra ID is now available to authorize Azcopy on Azure file share.

upvoted 5 times

...

allyou

7 months, 2 weeks ago

https://learn.microsoft.com/fr-fr/azure/storage/common/storage-ref-azcopy-copy

upvoted 2 times

allyou

7 months, 2 weeks ago

https://learn.microsoft.com/en-us/training/modules/configure-storage-tools/4-use-azcopy

upvoted 1 times

...

edurakhan

7 months, 3 weeks ago

This link: https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory clearly states: "You can provide AzCopy with authorization credentials by using Microsoft Entra ID. That way, you won't have to append a shared access signature (SAS) token to each command." The question is kind of confusing - "which SHOULD you use". You COULD use both, but I am assuming Microsoft Entra ID (Azure AD) SHOULD be the right way for both.

upvoted 1 times

...

RockyChak

8 months ago

Authorize access to blobs and files with AzCopy and Microsoft Entra ID https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory Both Blob and File storage can be authenticated with Entra ID and SAS

upvoted 3 times

...

ggogel

10 months, 1 week ago

Funny how even Microsoft is confused by their naming. It is called "Azure Files" or specifically "File Shares" and not "File storage".

upvoted 5 times

...

ka0s

12 months ago

I'm gonna go with: First: Azure AD Second: SAS Question which solution you SHOULD use not which you CAN. And AD is always preferred.

upvoted 2 times

...

AntaninaD

1 year, 1 month ago

Blob storage- Azure AD & SAS File storage - SAS only https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?toc=%2Fazure%2Fstorage%2Ffiles%2Ftoc.json#authorize-azcopy

upvoted 4 times

...

MailTempo

1 year, 1 month ago

Blob storage: Azure AD and shared access signatures File storage: Shared access signatures only That´s correct?

upvoted 3 times

...

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 2 question 86 discussion

Comments

Vokuhila

Sameer9371

hank00r

ggogel

SDiwan

tableton

suddin1

[Removed]

heartfilia42

Thisisacat

155e6a0

SeMo0o0o0o

OpOmOp

varinder82

3c5adce

3c5adce

ssky

tashakori

Ziolupo

allyou

allyou

edurakhan

RockyChak

ggogel

ka0s

AntaninaD

MailTempo

Get IT Certification

New Version GCP Professional Cloud Architect Certificate & Helpful Information

The 5 Most In-Demand Project Management Certifications of 2019