Exam DP-100 All Questions

View all questions & answers for the DP-100 exam

Exam DP-100 topic 2 question 97 discussion

Actual exam question from Microsoft's DP-100

Question #: 97
Topic #: 2

DRAG DROP
-

You manage an Azure Machine Learning workspace named workspace1 by using the Python SDK v2.

You must register datastores in workspace1 for Azure Blob storage and Azure Files storage to meet the following requirements:

• Azure Active Directory (Azure AD) authentication must be used for access to storage when possible.
• Credentials and secrets stored in workspace1 must be valid for a specified time period when accessing Azure Files storage.

You need to configure a security access method used to register the Azure Blob and Azure Files storage in workspace1.

Which security access method should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Batman160591 at June 20, 2023, 10:09 p.m.

Comments

Submit Cancel

LadyCasilda

Highly Voted 1 year, 9 months ago

On exam 18 August 2023

upvoted 7 times

...

A_PL300

Highly Voted 1 year, 9 months ago

on exam 4 September 2023

upvoted 5 times

...

jl420

Most Recent 6 months, 3 weeks ago

Identity / SAS

upvoted 1 times

...

phdykd

1 year, 10 months ago

Account key and SAS token is correct for both. agreed with abuluxury

upvoted 1 times

...

PI_Team

1 year, 10 months ago

correct

upvoted 1 times

PI_Team

1 year, 10 months ago

1. Azure Blob storage: Identity-based access (Azure AD authentication) allows you to use Azure AD credentials to authenticate and access Azure Blob storage. This is the recommended and more secure method for accessing Blob storage, as it avoids exposing account keys directly. 2. Azure File Storage: Shared access signature (SAS) is used to provide temporary access to resources in Azure File Storage. When using SAS, you can generate a token with specific permissions and expiration time, which can be used to access the Azure File share. This approach allows you to control the access to the file share for a specified time period without exposing the storage account key. SaM

upvoted 8 times

sl_mslconsulting

1 year ago

agreed with explanation. Link: https://learn.microsoft.com/en-us/azure/machine-learning/how-to-administrate-data-authentication?view=azureml-api-2#identity-based-data-authentication

upvoted 1 times

...

abuluxury

1 year, 10 months ago

Don't see why you can't use sas for both or account key

upvoted 2 times

jl420

6 months, 3 weeks ago

because it said "Azure Active Directory (Azure AD) authentication must be used for access to storage when possible"

upvoted 1 times

...

Batman160591

1 year, 11 months ago

seems correct

upvoted 2 times

...