Exam AZ-104 topic 3 question 70 discussion

Actual exam question from Microsoft's AZ-104

Question #: 70
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Storage account named storage1.

You need to enable a user named User1 to list and regenerate storage account keys for storage1.

Solution: You assign the Storage Account Encryption Scope Contributor Role to User1.

Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Mentalfloss at Aug. 20, 2024, 11:21 p.m.

Comments

Submit Cancel

Dankho

Highly Voted 8 months ago

The Storage Account Encryption Scope Contributor role allows a user to manage encryption scopes in a storage account but does not grant the ability to list and regenerate storage account keys. To meet the goal, you would need to assign the Storage Account Key Operator Service Role or a role with broader access such as the Storage Account Contributor role, which includes permissions to list and regenerate keys.

upvoted 7 times

...

Bravo_Dravel

Most Recent 4 months, 2 weeks ago

Selected Answer: B

This role allows managing encryption scopes but does not grant permissions to list and regenerate storage account keys1. To enable User1 to list and regenerate storage account keys, you should assign the Storage Account Key Operator Service Role or the Storage Account Contributor Role

upvoted 2 times

...

[Removed]

9 months, 1 week ago

Selected Answer: B

B is corerct

upvoted 1 times

9 months, 3 weeks ago

• The Storage Account Encryption Scope Contributor role provides permissions to manage encryption scopes within a storage account. However, it does not grant permissions to list or regenerate storage account keys. • To allow a user to list and regenerate storage account keys, the user should be assigned the Storage Account Key Operator Service Role or a higher role like Contributor or Storage Account Contributor. Thus, assigning the Storage Account Encryption Scope Contributor role does not meet the goal of enabling User1 to list and regenerate storage account keys.

upvoted 1 times

...

Alawi1990

9 months, 3 weeks ago

The Storage Account Encryption Scope Contributor role does not grant permissions to list and regenerate storage account keys. - No

upvoted 2 times

...

Mentalfloss

9 months, 3 weeks ago

Selected Answer: A

I wasn't sure if this was a real role so I Googled it, answer is A (Yes).

upvoted 2 times

Mentalfloss

9 months, 3 weeks ago

I stand corrected. Dumb-a me looked up that the role existed, it sounded like it does what it says on the tin, but other comments following mine indicate otherwise.

upvoted 1 times

...

arunyadav09

9 months, 3 weeks ago

It should be Storage Account Key Operator Service Role.

upvoted 1 times

...