Exam AZ-500 topic 2 question 93 discussion

The given answers are correct. 1. File Shares Requirement: Verify that identity-based authentication over SMB is enabled Go there to configure Identity-based authentication (Active Directory) for Azure file shares. Ref: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview 2. Share access signature Requirement: Only grant users access to contoso2023 in the year 2023

1. File Shares 2. Share access signature

Question is weird but stil: "SMB" is related to File Shares so File Shares. "Only access in the year 2023" is only doable with SAS so this

Something wrong is in this question. File Share (SMB) does not support SAS authentication. Instead it is clearly written we can map FS using Storage Account Key or by Kerberos (ADDS and/OR AAD DS)

FILE SHARES WHICH FACILITATE SMB CONNECTIVITY. SAS WHICH ALLOWS FOR SPECIFICITY WHEN IT COMES TO ACCESSIBILITY OF THE STORAGE ACCOUNT.

1. File shares 2. Shared access signature (SAS) https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview This article explains how Azure file shares can use domain services, either on-premises or in Azure, to support identity-based access to Azure file shares over SMB. Enabling identity-based access for your Azure file shares allows you to replace existing file servers with Azure file shares without replacing your existing directory service, maintaining seamless user access to shares. https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview A shared access signature (SAS) provides secure delegated access to resources in your storage account. With a SAS, you have granular control over how a client can access your data. For example: - What resources the client may access. - What permissions they have to those resources. - How long the SAS is valid.

Answers are correct

Answer is correct