ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam
Go to Exam

Exam AZ-140 topic 3 question 1 discussion

Actual exam question from Microsoft's AZ-140
Question #: 1
Topic #: 3
[All AZ-140 Questions]

You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. the Storage Blob Data Contributor role for storage1
  • B. the List folder / read data NTFS permissions for share1
  • C. the Modify NTFS permissions for share1
  • D. the Storage File Data SMB Share Reader role for storage1
  • E. the Storage File Data SMB Share Elevated Contributor role for storage1
  • F. the Storage File Data SMB Share Contributor role for storage1
Show Suggested Answer Hide Answer
Suggested Answer: CF 🗳️
by Nail at May 8, 2021, 9:45 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Nail
Highly Voted 3 years, 5 months ago
Correct
upvoted 11 times
...
Moot2
Most Recent 3 months, 1 week ago
Selected Answer: CF
c&F correct
upvoted 1 times
...
[Removed]
5 months, 4 weeks ago
Selected Answer: CF
C. the Modify NTFS permissions for share1 F. the Storage File Data SMB Share Contributor role for storage1
upvoted 1 times
...
ESAJRR
9 months, 3 weeks ago
Selected Answer: CF
C. the Modify NTFS permissions for share1 F. the Storage File Data SMB Share Contributor role for storage1
upvoted 1 times
...
jcxxxxx2020
1 year, 9 months ago
Passed the exam last Jan 28 2023 and this question is included. Provided answer is correct.
upvoted 3 times
...
feeneymi
1 year, 11 months ago
Selected Answer: CF
C & F Ref: https://learn.microsoft.com/en-us/azure/virtual-desktop/fslogix-profile-container-configure-azure-files-active-directory?tabs=adds Assign RBAC role to users Users needing to store profiles in the file share will need permission to access it. To do this, you'll need to assign each user the Storage File Data SMB Share Contributor role Then set NTFS permissions for example ((M) is for Modify): icacls y: /grant "[email protected]:(M)" icacls y: /grant "Creator Owner:(OI)(CI)(IO)(M)"
upvoted 4 times
...
Whatsamattr81
2 years ago
Weird question. It does only say login, nothing about saving stuff. You don't need write perms to simply log in, just read / list NTFS and read SMB. Obvs anything you do wont be saved. But you should be able to log in with the above perms.
upvoted 1 times
sumitchohan
3 months ago
even login would need permission as that would require writing the current state to profiles
upvoted 1 times
...
mcclane654
1 year ago
you need these permissions for fslogix to work. my vm froze completely when it tried to create fslogix profile without the correct permissions.
upvoted 1 times
...
...
[Removed]
2 years, 4 months ago
in windows server its creator owner permissions to the profile folder, modify permissions to the root folder but not to sub folders. that should do it.
upvoted 1 times
...
rockzhou
2 years, 5 months ago
Selected Answer: CF
Correct C F https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-configure-permissions#azure-rbac-permissions
upvoted 3 times
...
Justin0020
2 years, 10 months ago
Got this question on exam today.
upvoted 2 times
...
catblack
2 years, 11 months ago
D-F for my and coumentations say "All users that need to have FSLogix profiles stored on the storage account must be assigned the Storage File Data SMB Share Contributor role".
upvoted 1 times
...
Flacky_Penguin32
2 years, 12 months ago
C & F are correct.
upvoted 3 times
...
Azure_Az_U_Can_B
3 years, 2 months ago
Isn't it BF? Isn't Modify NTFS too much permission at Share1? That way they can delete other user's VHDs.
upvoted 1 times
Azure_Az_U_Can_B
3 years, 2 months ago
CF is Correct. You give the user Modify AND remove authenticated users and builtin/users, so that only one user has access to each profile container. Admins continue to have access if that was given correctly.
upvoted 2 times
...
theLazyGuy
2 years, 8 months ago
B is a read access, so they can't write into shared folder, so C is correct
upvoted 2 times
...
...
KaiserdomTW
3 years, 4 months ago
This question was shown at 2021/06/11
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago