AZ-104 practice questions 231–240

1. Question 231 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains a storage account named storage1. You need to configure a shared access signature (SAS) to ensure that users can only download blobs securely by name. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Configure the SAS token settings: Allowed services: Blob (since you want to access blobs). Allowed resource types: Service (if you want users to access all blobs within a container) or Object (if you want users to access a specific blob by name). Allowed permissions: Set to "Read" to allow downloading. Specify the start and expiry date for the token. If you're using a shared access policy, you can select it here. Otherwise, configure the SAS token directly.

   Source: Adapted from community discussion — Spoon3r

   References

   • Microsoft Learn

   

   Next question

2. Question 232 · 570 in bank

   You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1. You need to configure access to container1. The solution must meet the following requirements: • Only allow read access. • Allow both HTTP and HTTPS protocols. • Apply access permissions to all the content in the container. What should you use?

   • Aan access policy
   • Ba shared access signature (SAS)
   • CAzure Content Delivery Network (CDN)
   • Daccess keys

   Show answer

   Answer: B

   Explanation

   To configure read access to a container in an Azure Storage account while allowing both HTTP and HTTPS protocols and applying access permissions to all the content in the container, you should use a Shared Access Signature (SAS). Therefore, the correct option is: B. a shared access signature (SAS) Shared Access Signatures (SAS) are used to grant limited access to specific resources in your storage account while maintaining fine-grained control over the allowed operations, including read access. You can create a SAS token with the necessary permissions and then provide this token to the users or applications that need access to the container.

   Source: Adapted from community discussion — RanjanDeo

   References

   • Microsoft Learn

   Next question

3. Question 233 · 570 in bank

   Select 3

   You need to create an Azure Storage account named storage1. The solution must meet the following requirements: • Support Azure Data Lake Storage. • Minimize costs for infrequently accessed data. • Automatically replicate data to a secondary Azure region. Which three options should you configure for storage1? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

   • Azone-redundant storage (ZRS)
   • Bthe Cool access tire
   • Cgeo-redundant storage (GRS)
   • Dthe Hot access tier
   • Ehierarchical namespace

   Show answer

   Answer: BCE

   Explanation

   B. The Cool access tier: The Cool access tier is suitable for infrequently accessed data and offers lower storage costs compared to the Hot access tier. C. Geo-redundant storage (GRS): Geo-redundant storage replicates data to a secondary Azure region, providing data redundancy and disaster recovery capabilities. E. Hierarchical namespace: The hierarchical namespace is required for Azure Data Lake Storage, as it enables the storage account to support the data lake's file system structure. So, the correct options are B, C, and E.

   Source: Adapted from community discussion — RanjanDeo

   References

   • Microsoft Learn

   Next question

4. Question 234 · 570 in bank

   HOTSPOT - You have an Azure Storage account named storage1 that contains two containers named container1 and container2. Blob versioning is enabled for both containers. You periodically take blob snapshots of critical blobs. You create the following lifecycle management policy.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct, YNN. Y - See section tierToCool N - rule1 only applies to container1, not container2, see section prefixMatch N - This one is a bit complicated. Rehydrated files (that were in the archive tier first and then returned to hot or cool) wouldn't necessarily be archived after 30 days - as there's a condition that the last tier change must be at least 7 days ago. (I'll leave it open how these files became archived in the first place, before 30 days after creation...)

   Source: Adapted from community discussion — Batiste2023

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 235 · 570 in bank

   You have an Azure subscription that contains the storage accounts shown in the following table.

   

   Which storage account can be converted to zone-redundant storage (ZRS) replication?

   • Astorage1
   • Bstorage2
   • Cstorage3
   • Dstorage4

   Show answer

   Answer: B

   Explanation

   B. storage2 to convert to ZRS must the Kind be: Standard general-purpose v2 (StorageV2), Premium block blobs (BlockBlobStorage) or Premium file shares (FileStorage) and the Replication is from LRS possible (…from GRS/RA-GRS convert to LRS first) https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy#supported-storage-account-types https://learn.microsoft.com/en-us/azure/storage/common/redundancy-migration?tabs=portal#replication-change-table

   Source: Adapted from community discussion — Andreas_Czech

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 236 · 570 in bank

   You have an Azure subscription that contains the devices shown in the following table.

   

   On which devices can you install Azure Storage Explorer?

   • ADevice1 only
   • BDevice1 and Device2 only
   • CDevice1 and Device3 only
   • DDevice1, Device2, and Device3 only
   • EDevice1, Device3, and Device4 only

   Show answer

   Answer: D

   References

   • Microsoft Learn
   • azure.microsoft.com documentation

   Next question

7. Question 237 · 570 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Storage account named storage1. You need to enable a user named User1 to list and regenerate storage account keys for storage1. Solution: You assign the Storage Account Key Operator Service Role to User1. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 238 · 570 in bank

   HOTSPOT - You have an Azure Storage account named storage1 that contains a container named container1. The container1 container stores thousands of image files. You plan to use an Azure Resource Manager (ARM) template to create a blob inventory rule named rule1. You need to ensure that only blobs whose names start with the word finance are stored daily as a CSV file in container1. How should you complete rule1? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   BlockBlob makes most sense for CSV files: https://learn.microsoft.com/en-us/rest/api/storageservices/understanding-block-blobs--append-blobs--and-page-blobs For prefixmatch consult: https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-faq A prefix match string of container1/sub1/ applies to all blobs in the container named container1 that begin with the string sub1/. For example, the prefix will match blobs named container1/sub1/test.txt or container1/sub1/sub2/test.txt.

   Source: Adapted from community discussion — ducklaorange

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 239 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blobs in a container named container1. You plan to share access to storage1. You need to generate a shared access signature (SAS). The solution must meet the following requirements: • Ensure that the SAS can only be used to enumerate and download blobs stored in container1. • Use the principle of least privilege. Which three settings should you enable? To answer, select the appropriate settings in the answer area.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The correct answer should be: Allowed resource types: Container Allowed permissions: List and Read. Explanation: Container: "Grants access to the content and metadata of any blob in the container, and to the list of blobs in the container." Source: https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas#specify-the-signed-resource-field Specifying "Object" additionally would be redundant because it is a subset of "Container". List: "List blobs non-recursively." Source: https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas#specify-permissions Satisfies the requirement of enumeration. Read: "Read the content, blocklist, properties, and metadata of any blob in the container or directory. Use a blob as the source of a copy operation." Source: https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas#specify-permissions Satisfies the requirement of download.

   Source: Adapted from community discussion — ggogel

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 240 · 570 in bank

    HOTSPOT - You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.

    

    On June 1, you store two blobs in storage1 as shown in the following table.

    

    For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Correct answers! On June 6, File 1 will be stored in the Cool access tier: NO - Rule 1 applies and File 1 will be in archive storage. On June 7, File 2 will be stored in the Cool access tier: YES - Rule 5 applies to all files due to the lack of a prefix, and File 2 will be in cool storage. On June 16, File 2 will be stored in the Archive access tier: NO - Rule 3 applies and File 2 will be deleted.

    Source: Adapted from community discussion — justITtopics

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 231. 570 questions available.