Q: 15
HOTSPOT - You have an Azure subscription that contains an Azure Storage account
named storageaccount1. You export storageaccount1 as an Azure Resource Manager
template. The template contains the following sections.
For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Hot Area:
For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Hot Area:
Your Answer
Discussion
Yes, Yes, No
Seen this type a lot in the official practice set. The defaultAction Allow on storage accounts is key for open network access, and StorageV2 supports blob tiering, but Azure AD admins don’t get file share access by default. Pretty sure that matches what Microsoft expects, but correct me if I’m off.
Seen this type a lot in the official practice set. The defaultAction Allow on storage accounts is key for open network access, and StorageV2 supports blob tiering, but Azure AD admins don’t get file share access by default. Pretty sure that matches what Microsoft expects, but correct me if I’m off.
Nah, I think for the last statement it should be Yes, Yes, Yes.
I was under the impression that Global Admins in Azure AD can access resources like file shares if they have sufficient privileges, so picked Yes for all. Could be a common trap about RBAC vs data-plane access, not 100% sure here so let me know if I'm missing something.
I was under the impression that Global Admins in Azure AD can access resources like file shares if they have sufficient privileges, so picked Yes for all. Could be a common trap about RBAC vs data-plane access, not 100% sure here so let me know if I'm missing something.
Yes, Yes, No is how I'd answer. DefaultAction set to Allow means any public IP can access unless restricted, and StorageV2 lets you use archive tier per blob. You still need RBAC and more config for Azure AD admins to access file shares, so last one is No. Pretty confident but open to corrections.
Pretty sure it's Yes, Yes, No here. That defaultAction set to Allow means any public IP (like the one given) can access and StorageV2 supports archive blob tier. But Azure AD Global Admin doesn't get automatic file share access so last statement is No. Agree?
Yes, Yes, No
Hmm, I think for that last one I'd pick Yes instead of No. Global admins usually have wider access and I remember a practice test having that as a trick option.
Wait, does the question specify if the defaultAction is set to Allow or Deny? That would change the first statement.
Be respectful. No spam.
