Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 3 question 91 discussion

Actual exam question from Microsoft's AZ-104

Question #: 91
Topic #: 3

HOTSPOT
-

You have an Azure subscription linked to a hybrid Microsoft Entra tenant. The tenant contains the users shown in the following table.

You create the Azure Files shares shown in the following table.

You configure identity-based access for contoso2024 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Rediwed at Aug. 22, 2024, 1:36 p.m.

Comments

Submit Cancel

DJHASH786

Highly Voted 10 months, 2 weeks ago

Planning to take exam mid sep 2024, wish all you guys good luck and this is one heck of an exam

upvoted 26 times

...

Rediwed

Highly Voted 10 months, 2 weeks ago

I think it's NYN. N - User1 does not have access to any Azure resources since it is not synced to Entra AD, even if AD is configured as the authentication source. Y - User2 has access to to the storage account since it is a cloud-synced user, and AD is configured as the authentication source for storage2024. N - User2 can't access the content in Share3 since AD isn't configured as a source for storage2025.

upvoted 15 times

knowakuk

6 months, 3 weeks ago

1: No. it is written in the screenshot: solely Azure AD accounts are currently not supported. 2. Yes. User2 is synced so can access share.

upvoted 2 times

...

alsmk2

10 months, 2 weeks ago

Agree with this.

upvoted 3 times

...

Tayhull2023

Most Recent 7 months, 2 weeks ago

One thing I am not sure of with the wording of this question is although user1 is not sync'd it says "The tenant contains the users shown in the following table." The word Tenant to me would be speaking to Azure, not ADDS. So both users should be able to access it since both users are in Azure? Am I seeing that wrong?

upvoted 3 times

...

RVivek

7 months, 2 weeks ago

No --- This feature doesn't currently support user accounts that you create and manage solely in Azure AD. User accounts must be hybrid user identities, which means you'll also need AD DS and Azure AD Connect. You must create these accounts in Active Directory and sync them to Azure AD. https://learn.microsoft.com/en-us/answers/questions/1031080/authentication-issues-using-aad-kerberos-for-azure Yes-- User2 is a hybrid user identity as mentioned the link referenced above No -- share3 is hosted on contoso2025 which does not have AAD authentication enabled

upvoted 3 times

...

Stunomatic

8 months, 2 weeks ago

user account solely based in azure ad are currently not supported. And user1 solely based on Azure AD thats why N Y N

upvoted 2 times

...

examprepboy

9 months, 2 weeks ago

ANSWER - NYN

upvoted 1 times

...

areyoushawtho

10 months, 1 week ago

I think NYN N- AD Sync not enabled Y - Sync enabled, share access allowed for authenticated users N - Setting apply to storage2024 not storage2025

upvoted 3 times

...

Megabyte10

10 months, 1 week ago

User1 accessing content in share1: Since User1 does not have on-premises sync enabled, they likely cannot access the share. User2 accessing content in share2: User2 has on-premises sync enabled, so they can access the share. User2 accessing content in share3: Since share3 is in a different storage account (contoso2025), identity-based access may not apply unless explicitly configured, so they likely cannot access it. NYN

upvoted 2 times

...