ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 3 question 70 discussion

Actual exam question from Microsoft's AZ-104
Question #: 70
Topic #: 3
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage account named storage1.

You need to enable a user named User1 to list and regenerate storage account keys for storage1.

Solution: You assign the Storage Account Encryption Scope Contributor Role to User1.

Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Mentalfloss at Aug. 20, 2024, 11:21 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Dankho
Highly Voted 4 months, 3 weeks ago
The Storage Account Encryption Scope Contributor role allows a user to manage encryption scopes in a storage account but does not grant the ability to list and regenerate storage account keys. To meet the goal, you would need to assign the Storage Account Key Operator Service Role or a role with broader access such as the Storage Account Contributor role, which includes permissions to list and regenerate keys.
upvoted 6 times
...
Bravo_Dravel
Most Recent 1 month ago
Selected Answer: B
This role allows managing encryption scopes but does not grant permissions to list and regenerate storage account keys1. To enable User1 to list and regenerate storage account keys, you should assign the Storage Account Key Operator Service Role or the Storage Account Contributor Role
upvoted 1 times
...
[Removed]
6 months ago
Selected Answer: B
B is corerct
upvoted 1 times
[Removed]
5 months, 3 weeks ago
You assign the Storage Account Key Operator Service Role to User1.
upvoted 1 times
...
...
alsmk2
6 months, 1 week ago
Selected Answer: B
SA Cont or Key operator role required.
upvoted 1 times
...
Shakka
6 months, 1 week ago
Selected Answer: B
the Storage Account Encryption Scope Contributor role does not have the permissions to list and regenerate storage account keys. These actions require specific permissions that are not included in this role. To list and regenerate storage account keys, you would need a role that includes the Microsoft.Storage/storageAccounts/listKeys/action and Microsoft.Storage/storageAccounts/regenerateKey/action permissions. Some roles that have these permissions are: Owner Contributor Storage Account Key Operator Service Role1.
upvoted 2 times
...
Mentalfloss
6 months, 2 weeks ago
Selected Answer: B
Cancelling my previous A vote.
upvoted 1 times
...
arunyadav09
6 months, 2 weeks ago
Selected Answer: B
It should be Storage Account Key Operator Service Role.
upvoted 2 times
...
appyapurv
6 months, 2 weeks ago
• The Storage Account Encryption Scope Contributor role provides permissions to manage encryption scopes within a storage account. However, it does not grant permissions to list or regenerate storage account keys. • To allow a user to list and regenerate storage account keys, the user should be assigned the Storage Account Key Operator Service Role or a higher role like Contributor or Storage Account Contributor. Thus, assigning the Storage Account Encryption Scope Contributor role does not meet the goal of enabling User1 to list and regenerate storage account keys.
upvoted 1 times
...
Alawi1990
6 months, 2 weeks ago
The Storage Account Encryption Scope Contributor role does not grant permissions to list and regenerate storage account keys. - No
upvoted 2 times
...
Mentalfloss
6 months, 2 weeks ago
Selected Answer: A
I wasn't sure if this was a real role so I Googled it, answer is A (Yes).
upvoted 2 times
Mentalfloss
6 months, 2 weeks ago
I stand corrected. Dumb-a me looked up that the role existed, it sounded like it does what it says on the tin, but other comments following mine indicate otherwise.
upvoted 1 times
...
arunyadav09
6 months, 2 weeks ago
It should be Storage Account Key Operator Service Role.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago