Exam AZ-104 topic 3 question 47 discussion

1) A shared access signature (SAS) token 2) A shared access signature (SAS) token Blob Storage: Support both Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json#authorize-azcopy

On the Exam 3/29/23.

CORRECT

- A shared access key (SAS) Token - Anonymous

.\azcopy.exe copy 'https://STORAGEACCOUNTNAME.blob.core.windows.net/test2/1.html?SASKEY' 'https://STORAGEACCOUNTNAME.file.core.windows.net/testa/f1/1.html?SASKEY'

Shouldn't the Oath authentication also be right for Blob storage source? The Oath technically is Azure AD ( or entra ID ) authentication which is supported for blob storage/AZCopy.

To storage1, you could authenticate with Access Key, SAS and AAD, but Storage1 has disabled public access, so you can't access it with AzCopy even authenticated. However in SAS toiken you can specify authorized IP range from which you can use your access. Access Key and AAD don;t have that option, hence the only possible authorization method for storage1 is SAS.

Answer is SAS for both.. most secured way to copy files

1.SAS 2.SAS https://learn.microsoft.com/en-us/azure/storage/common/storage-ref-azcopy-copy Azure Blob (SAS or public) -> Azure Blob (SAS or OAuth authentication) Azure Blob (SAS or OAuth authentication) -> Azure Blob (SAS or OAuth authentication) - See Guidelines. Azure Blob (SAS or public) -> Azure Files (SAS) Azure Files (SAS) -> Azure Files (SAS) Azure Files (SAS) -> Azure Blob (SAS or OAuth authentication)

1) SAS 2) SAS source -> destination Azure Files (SAS) -> Azure Files (SAS) https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy#synopsis https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy

I used free version access for this site and it helped me pass the exam. Some questions that I had on the exams, I took the exam more than once, are not available under the free tier access, but 80% of the questions came from here. I do recommend investing a bit of money and getting full access to this site. I didn't memorise answers but analysed them and studied as Microsoft does tweak them a bit. This Q was on the exam.

Answer is wrong, the correct is: 1) A shared access signature (SAS) token, Oauth 2) A shared access signature (SAS) token See here: https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy in detail the line: local <-> Azure Blob (SAS or OAuth authentication) Remember that Oauth can use AD, see here: https://learn.microsoft.com/en-us/azure/storage/files/authorize-oauth-rest?tabs=portal "Azure Files OAuth over REST (preview) enables admin-level read and write access to Azure file shares for users and applications via the OAuth authentication protocol, using Azure Active Directory (Azure AD)..."

Answer not correct. regarding MS is Blob accessed by AAD or SAS. SAS is uses for Field 2 and regarding the MS Article is OAuth used with Azure AD https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory Correct must be: Field 1: OAuth Field 2: shared access signature (SAS) token

Blob Storage: Support Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported.

Cleared Exam today 26 Feb, This question was there in exam.

1. SAS token 2. SAS token https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#option-2-use-a-sas-token Option 2: Use a SAS token - You can append a SAS token to each source or destination URL that use in your AzCopy commands.

I thing it is SAS token (only) for both, looking at the following documentation: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview#when-to-use-a-shared-access-signature "Additionally, a SAS is required to authorize access to the source object in a copy operation in certain scenarios: ... When you copy a blob to a file, or a file to a blob. You must use a SAS even if the source and destination objects reside within the same storage account." 1) could be SAS and AD, but stated under above link SAS needs to be provided for source when copying to a FileShare 2) definitely SAS token, since AD Auth is not supported by FileShare